También: security information and event management

Security information and event management - collecting logs centrally to detect and investigate threats. Covers parsing and normalisation, correlation rules, dashboards, and alert tuning.