re: Honest question

quote:

---

What is that?

---

Long story short, it’s a piece of software that your business runs that collects and consolidates logs from various systems, analyzes them in real time, and alerts on specific security events. Some of them also provide automated actions to help mitigate cybersecurity threats (called “SOAR).

Microsoft sentinel, splunk (soon to be owned by Cisco), reliaquest, AWN, devo, ELK stack, deep watch, etc. are all SEIM/SOAR solutions