ConceptsSIEM

SIEM

Security Information and Event Management: the platform that collects, stores, normalizes, and analyzes security telemetry, the central tool for detection, hunting, and investigation in modern SOCs.

Glossary definition

13 direct links5 lessons

Concept Neighborhood

Explore this concept’s connections in the groups below.

Start here

Detection engineering

A related concept to explore, covered by 16 lessons.

Open concept →

Relatedsorted by lesson coverage

Detection engineeringStart here

lessons

Security Analyst Toolbox

lessons

Security Engineering

lessons

Kusto Query Language

lessons

Log Source Taxonomy

lessons

PAM SIEM Integration

lessons

Show 7 more connections

Query Performance

lessons

SIEM Data Models

lessons

SIEM Investigation Workflow

lessons

Splunk SPL

lessons

Log Management Platforms

lessons

SOAR

lessons

Syslog

lesson

Related Lessons

5 lessons cover this concept

Design Security Telemetry

General Beginner

Build Reliable Source Coverage

General Beginner

Protect the Telemetry Pipeline

General Beginner

Make Telemetry Detection-Ready

General Beginner

Operate and Improve Telemetry

General Beginner