Grey Noise Explainer - Know More Noise

Summary: GreyNoise founder Andrew describes a system that passively collects internet-wide scan and attack traffic from good, bad and unknown actors, then analyzes and enriches that data and compares it to what a customer sees on their own network. The company positions the product as helping SOC teams reduce alerts by telling them what not to worry about.
Why it matters: The pitch rests on a simple claim: most of the traffic hitting your network is background noise, and the cost of treating it as a threat lands on analysts who are already slammed.

Read the original at GreyNoise Blog ↗