SIEM is a tool that collects, aggregates, normalizes the data and analyses it according to pre-set rules and presents the data in human readable format.
The video below talks in detail about the internal working of the SIEM solutions and how the different vendors use this functionality and different terminologies used by them. It briefly discusses the deployment options also.
Leave a Reply