A mechanism that aggregates logs from various devices and detects threats through correlation analysis.
Short for Security Information and Event Management. It aggregates and cross-analyzes diverse logs to detect signs of a threat. Its value lies in surfacing signs of an attack spanning multiple devices that wouldn't be visible in any single log.
© 2026 ITBGM