Skip to content

Glossary: Vulnerability Management and Monitoring

SIEM

Also written: security information and event management, sim

Security information and event management: the central monitoring tool that collects, normalizes, correlates, alerts on, stores and reports on events from every source. It would have linked the stolen-password VPN and server sign-ins into one alert.

Where the book teaches it

Related terms

correlation rulelog aggregationSOARXDRnormalize