Skip to main content

Command Palette

Search for a command to run...

Lets explore SIEM

Updated
1 min readView as Markdown

What is SIEM - SIEM stands for Security Information and Event Management

Primary Function - This is a tool that collects information from various sources.It then aggregates and analyzes and creates security report

What else can SIEM do -

SIEM can perform real-time monitoring, threat detection and correlation of events

SIEM Tools :-

Splunk

IBM QRadar

ArcSight

LogRhythm

AlienVault

SumoLogic

Microsoft Sentinel

Elastic Security( ELK Stack)

More from this blog

Untitled Publication

9 posts