Security information and event management

Tooling that collects and correlates log and event data from across systems to detect and investigate threats.

Covers collecting, correlating and analysing log and event data to detect and investigate threats. Automating response steps and orchestrating other tools is under Security orchestration, automation and response, even where one product does both.

Scheme

• Technologies and capabilities

Broader terms

• Security operations