11 — Technology category · TR-100.40
Security Monitoring & Response
Collecting security events in one place, correlating them into detections and automating the first steps of response.
- SIEM
- SOAR
- Security Operations
In scope
- Security event collection and correlation
- Detection rules
- Response playbooks
Example technologies · 4
Well-known technologies in this category, named as facts. Not a shortlist or an endorsement.
- Splunk Enterprise Security
- Microsoft Sentinel
- Google Security Operations
- Elastic Security