SIEM (security information and event management)

Also written: SIEM

A system that collects and correlates events from many sources and fires alert rules. Rules need tuning so normal activity does not flood analysts.

Where the book teaches it