What Is a SIEM?

A SIEM (security information and event management) is a software solution that normalizes, filters, correlates, assembles, and centrally manages other operational events to monitor, alert on, respond to, analyze, audit, and manage security and compliance pertinent information. SIEM systems provide fundamental security operations like other product categories. Their functions and delivery mechanisms, hardware appliances, virtual appliances, and services vary by vendor. They provide more efficient and useful analysis capabilities for information security professionals and their organizations.

Article complet  : ici