This will be an in-depth explanation of the process of collecting and analyzing log data to find exploitation attempts using machine learning techniques as well as more classical methods.
It will explain details ranging from the creation of the custom sensors to creating ways to standardize the log format for easy parsing and processing. Topics that I'll cover will also be related to automated ways to analyze and match exploits in the wild to specific request patterns as well as integrating SIEM systems with constant threat intelligence for more robust detection & protection.