Skip to content

Glossary: Logs and Data Sources for Investigations

Dashboard

Also written: dashboards, panel

A live screen of charts and counts built from many sources, usually in the SIEM, that shows an attack's shape and scope at a glance. The raw events you drill down to are the real evidence.

Where the book teaches it

Related terms

Drilling downAutomated reportAlertSIEM (security information and event management)