A major challenge of a good incident response program is balancing the need for visibility, detection and response with the cost and complexity of building and maintaining a usable and effective security stack.
Article Link: https://blog.vectra.ai/blog/visibility-detection-and-response-using-a-siem-less-architecture