Skip to content

Glossary: Security Monitoring and Automation

SIEM (security information and event management)

Also written: SIEM, SIEMs

The center of security monitoring: it collects, parses and stores logs, correlates events with rules, raises alerts and reports. Alex builds a tiny one from SQLite and SQL.

Where the book teaches it

Related terms

correlation rulethreshold rulelog aggregationalert