Alerting and Monitoring Activities Flashcards
What is Log Aggregation?
process of collecting and consolidating log data from various sources into a centralized location.
Going to help with troubleshooting, performance monitoring, security analysis, and compliance.
What is Alerting?
involves setting up notifications to inform relevant stakeholders when specific events or conditions occur.
What is Scanning?
regularly examining your systems, networks, or applications to identify vulnerabilities, configuration issues, or other potential problems
What is a Vulnerability Scan?
Checks for known vulnerabilities in your systems, networks, or applications by comparing your system’s current state against a database of known vulnerabilities,
What is a Configuration Scan?
checks for misconfigurations that could impact your system performance or security
What is a Code Scan?
will check the source code of an application for potential issues such as security vulnerabilities or coding errors
What is Reporting?
generating summaries or detailed reports based on the collected and analyzed data.
What is Archiving?
involves storing data for long retention periods or for future reference including all of your organization’s log data, performance data, incident data, and other types of important data that you may have collected over time.
What is Alert Response and Remediation or Validation?
Involves taking appropriate actions in response to alerts, ensuring that the identified issues have been effectively addressed.
What is Remediation?
steps used to resolve the identified issues or vulnerabilities
patching outdated software, reconfiguring services, or modifying an application’s source code
What is Validation?
verifying that the remediation you implemented was actually successful and has effectively addressed the given vulnerability or issue.
What is Quarantining?
Isolating a system, network, or application to prevent the spread of a threat and limit its potential impact
What is Alert Tuning?
Adjusting alert parameters to reduce errors, false positives, and to improve the overall relevance of alerts being generated on a given system
