Difference between revisions of "Security Information and Event Management"

From MgmtWiki
Jump to: navigation, search
(Full Name)
(Context)
Line 11: Line 11:
 
# [https://cloudblogs.microsoft.com/microsoftsecure/2018/04/17/connect-to-the-intelligent-security-graph-using-a-new-api/ Connect to the Intelligent Security Graph using a new API] is a Microsoft variant for the Azure cloud current as of 2018-04-17.
 
# [https://cloudblogs.microsoft.com/microsoftsecure/2018/04/17/connect-to-the-intelligent-security-graph-using-a-new-api/ Connect to the Intelligent Security Graph using a new API] is a Microsoft variant for the Azure cloud current as of 2018-04-17.
 
# [https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-of-diagnostic-logs#resource-diagnostic-settings Collect and consume log data from your Azure resources]
 
# [https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-of-diagnostic-logs#resource-diagnostic-settings Collect and consume log data from your Azure resources]
 +
 +
==Solutions==
 +
 +
===Gartner Magic Quadrant===
 +
The companies that were in the visionary half of the chart were ranked in the following order.
 +
# Exabeam
 +
# IBM
 +
# Securonix
 +
# Splunk
 +
# Rapid7
 +
# Logrythm
 +
# Gunucul
 +
# Microsoft
 +
# Sumo Logic
 +
# Fortnet
 +
The leader of the field in longevity is ArcSight by Microfocus (after merger from HP) which is rather poorly rated by Gartner. They were the ones who identifier the problem for the customer as "too much data" back in 2001.
  
 
==References==
 
==References==

Revision as of 16:41, 5 November 2021

Full Name

SIEM = Security Information and Event Management

Originally this term was applied to data collection about the security state and events in an enterprise. It has since broadened to cover pro-active security state determination and remediation of cyber threats as well, although often under a wide variety of different names.

Context

Web sites have long kept logs of incoming HTTP traffic to diagnose web site problems.

References

  1. Wikipedia page on SEIM
  2. Connect to the Intelligent Security Graph using a new API is a Microsoft variant for the Azure cloud current as of 2018-04-17.
  3. Collect and consume log data from your Azure resources

Solutions

Gartner Magic Quadrant

The companies that were in the visionary half of the chart were ranked in the following order.

  1. Exabeam
  2. IBM
  3. Securonix
  4. Splunk
  5. Rapid7
  6. Logrythm
  7. Gunucul
  8. Microsoft
  9. Sumo Logic
  10. Fortnet

The leader of the field in longevity is ArcSight by Microfocus (after merger from HP) which is rather poorly rated by Gartner. They were the ones who identifier the problem for the customer as "too much data" back in 2001.

References