JDMurray wrote: » For the short term, I would suggest going through the training offered by your SIEM provider and getting any certification(s) it offers.