SECURITY INFORMATION & EVENT MANAGEMENT / SIEM
defined.

What is Security Information & Event Management (SIEM)?

SIEM converted from compliance log storage in the 2000s to modern detection engineering platforms. Leaders: Splunk, Elastic, Microsoft Sentinel, Chronicle, Sumo Logic. Detection content is typically written in Sigma and translated per platform.

Related terms.

• Endpoint Detection & Response (EDR)
• Managed Detection & Response (MDR)
• Extended Detection & Response (XDR)
• Security Operations Center (SOC)

Where this shows up.

See our web application penetration testing, API security testing, network penetration testing, and cloud security audit services for how we test for and defend against this class of issue.