IDC PeerScape: SIEM Practices for Enabling a Trusted Tool

IDC PeerScape: SIEM Practices for Enabling a Trusted Tool

This IDC PeerScape discusses the security information and event management (SIEM) practices that enable a trusted tool."A SIEM is one of the most complex and costly tools in the security operations center," said Michelle Abraham, research director, Security and Trust at IDC. "It is incumbent upon security teams to maximize the detection and correlation capabilities of the SIEM in their differentiated environment by ingesting necessary log sources and tuning the rules to reduce noise while ensuring critical alerts are examined."

Please Note: Extended description available upon request.