Log Management and Intelligence

STM is supposed to be “beyond Security Information Management” (SIM). According to STM, the five core SIM functions (pp 6-7) are:. Collect event data. Store data. Correlate to show relationships (what the book calls “true power”) … (more)