|
|
SIEM |
Security Monitoring - Maintain |
|
|
SIEM |
Security Monitoring - Analyse |
|
|
SIEM |
Security Monitoring - Gather |
|
|
SIEM |
Security Monitoring - Determine |
|
|
SIEM |
Security Monitoring - Respond |
|
|
SIEM |
Security Monitoring - Recover |
|
|
Windows Event Log |
SIEM |
|
|
Syslog |
SIEM |
|
|
SIEM Engineer |
SIEM |
|
|
Rules |
SIEM |
|
|
Define and Maintain Correlation Rules |
SIEM |
|
|
Define and Maintain Audit Conditions |
SIEM |
|
|
Define and Maintain Compliance Checks |
SIEM |
|
|
Define and Maintain Capture and Alerting Requirements |
SIEM |
|
|
Define and Maintain Misuse and Abuse Cases |
SIEM |
|
|
Define and Maintain Intelligence Queries |
SIEM |
|
|
SIEM Configuration Management |
SIEM |
|
|
Security Monitoring Service - Overarching Process Flow |
SIEM |
|
|
Define Rules in SIEM |
SIEM |
|
|
Cyber Analyst |
SIEM |
|
|
Logs |
SIEM |
|
|
Security Orchestration and Response (SOAR) |
SIEM |
|
|
Define and Maintain SOAR workflows. |
SIEM |