SIEM stands for security information and event management. The security information side covers collecting and storing log data from across the environment, while the event management side covers analyzing those events with rules to detect threats and raise alerts. Legacy SIEMs typically leave investigation and response to analysts or separate tools.
Back to Security information and event management (SIEM)
What does SIEM stand for?
A quick answer to a common question about security information and event management (SIEM).