← Security+ glossary

Security information and event management (SIEM) SIEM

A platform that collects, normalizes, correlates and analyzes logs and events from across the environment and generates alerts and reports. It is the heart of the SOC (Security Operations Center) because it gives analysts a unified overview and enables rapid detection and investigation of incidents.

All Security+ guides →