I have another new blog up on the Tripwire State of Security site: https://www.tripwire.com/state-of-security/how-integrate-fim-soar-platforms

While SOAR adoption has grown rapidly in recent years, FIM data is often restricted to SIEM and audit-only tooling – something I’d love to see change in a zero-trust security world where automation is key to keeping on top of the threat environment. 

I am a big fan of using FIM audit data to drive your automation platforms but surprisingly few do - I wonder if I will be able to say the same thing for long.