Glossary: Security Operations and Incident Response
SIEM (security information and event management)
A system that collects logs from everywhere, correlates them and alerts on rules. It often acts as the integration hub.
Where the book teaches it
Related terms
SOAR (security orchestration, automation, and response)CorrelationHub and spokeAlert