Security Event Management (SEM)

Security Event: Suspicious activity that might compromise the security of your system

Security Incident: An occurrence that jeopardizes the confidentiality, integrity or availability of a system.

Sources of Security Events:

• Server and workstation operating system logs
• Application logs
• Security tool logs
• Outbound proxy logs and end-user application logs
• Firewalls
• Data center storage

Now we have to get the relevant ones: