SIEM

Security Information and Event Management (SIEM) is a security solution that collects and analyzes log data from across an organization IT infrastructure in real-time. SIEMs aggregate logs from firewalls, servers, applications, and endpoints to detect threats, policy violations, and suspicious activity. Features include centralized visibility, automated alerting, correlation rules, compliance reporting, and incident investigation. Popular SIEM tools include Splunk, IBM QRadar, Microsoft Sentinel, and Elastic SIEM.