Siem Glossary

Browse 5 siem terms defined in plain English, from the cultural dictionary of computing.

5 Siem Terms

Correlation Rule: A detection rule that links multiple events, signals, or patterns together to identify behavior that would not be obvious from any single alert alone....
Detection Engineering: The practice of designing, testing, tuning, and maintaining detection logic so security tools can reliably identify malicious behavior. It treats detections...
Detection Rule: A concrete rule in a SIEM, EDR, IDS, or similar tool that triggers an alert when defined conditions are met. Detection rules can be signature-based,...
Log Collector: A service or agent that gathers logs from endpoints, applications, network devices, or cloud platforms and forwards them to centralized storage or analysis...
Security Information and Event Management: A platform that collects, normalizes, correlates, and searches security logs for detection and investigation. It shows up in application security, identity,...