SIEM

Overview

Security Information and Event Management - a system that combs through all of the log files that various Servers or security devices (Firewalls) create to look for suspicious or unwanted activity and returns a list of items that should be further looked into. This is important because those logs are VERY difficult to read and have a ton of information that is not very useful or friendly to read. Enable works with outsourced companies to provide this. These services are most valuable when combined with a SOC.


tags: #security #services #Enable_Products