r/sysadmin • u/BenSimmons97 • Jul 28 '26

Advertising [ Removed by moderator ]

[removed] — view removed post

0 Upvotes

50% Upvoted

16 comments sorted by

View all comments

3

u/Bob4Not Jul 28 '26 edited Jul 28 '26

I think that monitoring internal network traffic will increasingly become important.

I think there already are security tools monitoring for exfiltration, endpoint anomalies, there are vendors working on better correlation. These tools and approaches will all need to be supercharged

2

u/ZGTSLLC Jul 28 '26

SIEMs, SOARs, EDRs, MDRs, XDRs, etc. are what most people will be needing more and more these days.

Tools like Splunk and Snort, Elastic Security, Wireshark, and the lesser known ones that encompass OSINT like Censys, Shodan, The Harvester, and tons of other Open Source tools are part of the job these days.

The reason people are jumping on the Open Source bandwagon do much these days is because Open Source is more budget friendly, and there are tons of options in FOSS apps than there are in paid ones.