kompozit · edukator režim · za predavanje i PDF
SIEM
Odbrana u centru, pretnje koje suzbija levo, tehnike koje neutrališe desno. Ispod kartice — profil odbrane: šta presreće i koliko košta.
← Threats it reduces6
Threats it reduces. Klik vodi na stranicu pojma.
defense · № 015 · monitoring / response
SIEM
SIEM (Security Information and Event Management) is a system that collects logs and events from diverse sources across the entire infrastructure, centralizes them, and applies correlation rules to detect suspicious patterns and security incidents.
→ profil odbrane · šta presreće i koliko košta
tip kontroleDetektivna
domenPraćenje i odgovor
napor ↔ uticajVisok napor / Visok uticaj
alat · standardMicrosoft Sentinel, Splunk, Wazuh, Elastic SIEM, IBM QRadar