SIEM 101

Security information and event management (SIEM) is a security solution that collects and interprets data within the organization and then detects potential threats. Thanks to SIEM, security threats can be monitored in real-time. In this training, we will explain how a SIEM works in general. Without going too deep, we're going to provide you enough information for the SOC analyst to understand what's going on behind the scenes. At the end of the training, you will have a general understanding of the following topics:

1. 1Lessons5 lessons

   1. 1.1SIEM IntroductionPreview5 min
   2. 1.2Log Collection2 questions · 5 min
   3. 1.3Log Aggregation and Parsing2 questions · 5 min
   4. 1.4Log Storage2 questions · 5 min
   5. 1.5Alerting2 questions · 5 min