Glossary: Endpoint, Application and Email Security

SIEM (security information and event management)

Also written: security information and event management

A system that collects logs from almost everything, keeps them for search and compliance, and runs alert rules the team writes. It covers more sources than XDR but has less built-in response.