SOC / Blue Team · 5 min
What Is a SIEM?
Bringing logs together so patterns become visible
This lesson explains the concept, then checks your understanding in a short interactive exercise.
What a SIEM does
A SIEM (Security Information and Event Management) system centralizes logs from many sources, normalizes them into a common format, and lets analysts search, correlate and build detections across all of it.
- Centralized log collection
- Normalization into a common format
- Correlation across multiple sources
- Search, dashboards and alerting
- Retention for later investigation
Examples, not endorsements
Tools like Microsoft Sentinel, Splunk, Elastic and Google SecOps are common SIEM platforms used in the industry. This lesson isn't training on any specific product — the concepts apply across all of them.
Loading the interactive lesson…