SIEM stands for Security Information and Event Management. It’s a centralized platform that collects logs from every device on your network.

A SIEM performs three critical functions: Collection (logs from servers, firewalls, switches, endpoints), Correlation (finding patterns across events), and Alerting (surfacing meaningful incidents).

Part of the free Intro to Cyber course by Cover6 Solutions.