SIEM and SOAR systems

Question 1

What does SIEM stand for

Answer 1

SEcurity information and event management

Question 2

What does SIEM do?

Answer 2

It gathers a immense amount of data, with the ability to do firewalls, IDS, IPS solutions. Then you can log, aggregate, normalized, and review. The main components are security Infomation management and Security Event management.

Question 3

What is the SIM (security Information Management?

Answer 3

Collects and stores then aggregates log data for your review

Question 4

What is a SEM (Security Event Managemet)

Answer 4

collects any threats or events that are occuring, then aggregate and then normalize for your review

Question 5

What is security orchestration automation response?

Answer 5

It is a very manual response that provides an automated response, with a streamiline the response process while used in conjuction with a SIEM