Glossary 📡 Monitoring

Security Monitoring

SIEM

Security Information and Event Management collects logs from many systems in one place to search, correlate, and alert.

Why this matters

Attackers often go unnoticed for a long time, and without logs you may not be able to tell what happened or what was accessed.

You might see this as

Microsoft SentinelSplunkQRadar

More in Monitoring

Log collectionGathering and keeping activity records from devices, apps, and cloud services so events can be reviewed later.Threat detectionRules and analytics that spot known attack patterns or unusual activity and raise an alert.User Behavior Analytics (UEBA)User and Entity Behavior Analytics learns normal activity and flags unusual behavior, like sign-ins at odd hours or locations.Threat huntingAnalysts proactively searching through data for hidden attackers rather than waiting for an alert.Alert correlationLinking related alerts from different sources into one incident so the bigger picture is easier to see.Security dashboardsVisual summaries of alerts, trends, and security status that help teams see what needs attention.

Want help with monitoring?

Tell me what you have and I'll tell you which few things actually matter for you.

Get in touchSee what I offer