006 Common Data Models: to use or not? скачать в хорошем качестве

006 Common Data Models: to use or not?

Episode 006 discusses the broader question of whether to use a common data model like Open Cybersecurity Schema Framework (OCSF) or not. It outlines the options including schema-on-write and schema-on-read approaches, and also elucidates the trade-offs especially in the context of Databricks Lakehouse for cybersecurity. The video also demonstrates how you could even query Zeek logs (extracted from PCAP using Zeek) in cloud storage without ingesting that data into delta lake format if you really need to trade performance for cost savings. All opinions expressed in the video are my own and do not necessarily reflect the views and opinions of my employers past or present.