Security Information and Event Management

From MgmtWiki
Revision as of 14:30, 5 November 2021 by Tom (talk | contribs) (Full Name)

Jump to: navigation, search

Full Name

SIEM = Security Information and Event Management

Originally this term was applied to data collection about the security state and events in an enterprise. It has since broadened to cover pro-active security state determination and remediation of cyber threats as well, although often under a wide variety of different names.

Context

Web sites have long kept logs of incoming HTTP traffic to diagnose web site problems.

References

  1. Wikipedia page on SEIM
  2. Connect to the Intelligent Security Graph using a new API is a Microsoft variant for the Azure cloud current as of 2018-04-17.
  3. Collect and consume log data from your Azure resources

References