Lets explore SIEM

What is SIEM - SIEM stands for Security Information and Event Management

Primary Function - This is a tool that collects information from various sources.It then aggregates and analyzes and creates security report

What else can SIEM do -

SIEM can perform real-time monitoring, threat detection and correlation of events

SIEM Tools :-

Splunk

IBM QRadar

ArcSight

LogRhythm

AlienVault

SumoLogic

Microsoft Sentinel

Elastic Security( ELK Stack)