Your hub for all things security data

Rick Doten, former Healthplan CISO at Centene and longtime security leader, reflects on how logging, telemetry, and security decision-making are evolving – and why security telemetry is now fundamentally a data science problem.

Security teams often reduce log volume by sampling or filtering, only to discover gaps during detections or investigations. This piece outlines a security-engineering approach to log optimization that starts from real detection and IR workflows, with concrete examples across web, endpoint, and cloud telemetry showing how to cut noise without losing signal.

Zoom's QoS metrics reveal location discrepancies that IP geolocation can't catch: latency, jitter, and packet loss encode the physical distance packets travel, even when VPNs mask the origin. By comparing each participant's connection quality against their meeting peers rather than absolute thresholds, you can spot remote workers whose network patterns consistently look different from where they claim to be.

Treating Zoom as "just a video app" overlooks that it is a collaboration surface with direct implications for identity, access control, data exposure, and governance. Here's how to tap into meeting metadata, webhooks, and operation logs to detect threats hiding in plain sight across your collaboration platform.