SIEM

Security Information and Event Management (SIEM) is a security technology that is employed by SecOps teams to help detect, analyze, and respond to cyber threats. SIEM collects and analyzes telemetry from a variety of sources, such as operating systems, firewalls, endpoint protection, cloud providers, and other sources that provide insights into activity and behaviors across the network. The SIEM can be used to alert security analysts to suspicious or malicious activity, and also serves as a primary source of information needed to complete triage and incident investigations.