485 B
485 B
Security Information and Event Management (SIEM)
-
- Threat detection
- Investigation
- Time to respond
- Some other SIEM features:
- Basic security monitoring
- Advanced threat detection
- Forensics & incident response
- Log collection
- Normalization
- Notifications and alerts
- Security incident detection
- Threat response workflow
- Threat detection