TIM-7030 v4

Radoglou-Grammatikis, P., Sarigiannidis, P., Iturbe, E., Rios, E., Martinez, S., Sarigiannidis, A., Eftathopoulos, G., Spyridis, Y., Sesis, A., Vakakis, N., Tzovaras, D., Kafetzakis, E., Giannoulakis, I., Tzifas, M., Giannakoulias, A., Angelopoulos, M., & Ramos, F. (2021). SPEAR SIEM: A security information and event management system for the smart grid. Computer Networks, 193.
The design and implementation of a SIEM system capable of detecting, normalizing, and correlating cyberattacks and anomalies against various SG application-layer protocols is the key contribution of our work.

Miloslavskaya, N., & Tolstoy, A. (2020). IoTBlockSIEM for information security incident management in the internet of things ecosystem. Cluster Computing: The Journal of Networks, Software Tools and Applications, 23(3), 1911.
The IoT ecosystem is viewed as a protection entity to be covered, based on the available standards on the IoT's simplified architecture and reference model. Its layers are numerous security controls for collecting raw data for complex and multi-stage processing and further detection of information security (IS) incidents.

Dion, J. (2019). SIEM (Chapter 20: Monitoring and auditing) [Video]. In CompTIA Security+ (SY0-501): Complete course and practice exam. Packt Publishing.
In this video, you will learn about a SIEM and how it is used in logging and auditing. A SIEM is a security information and event management system. This is going to combine all the security event management and security information management systems into one single tool that we can use from the security operations center.

Splunk (n.d.). Splunk Phantom security orchestration & automation.
This website allows you to explore more about security and automation and read about any areas of interest.

Greene, S. (2020). 7.2 Syslog, SIEM, and SOAR (Lesson 7: Summarize the techniques used in security assets [Video]. In CompTIA Security+ SY0-601. Pearson IT Certification.
Syslog stands for System logging protocol, and it's a standard protocol used to send system log or event messages to a specific server known as a Syslog server. It is primarily used to collect various device logs from several different machines to a central location for monitoring, analysis, and review. In this video, you will learn about Syslog, SIEM, and SOAR.

Greene, S. (2017). 7.9 SIEM (Lesson 7: Install and configure network components) [Video]. In CompTIA Security+ SY0-501. Pearson IT Certification.
SIEM (security information and event management) solution offers real-time data capture, event correlation analysis, and reporting. Audit and event logs are chronological records of events and actions. Critical log sources include firewalls, IDSs/IPSs, proxy servers, authentication servers and devices, operating systems, and key applications.

Shannon, M. (2020). 11.4 Core SIEM activities (Lesson 11: Log Management and SIEM) [Video]. In GIAC security essentials (GSEC). Pearson IT Certification.
SIEM has evolved from two separate services, security event monitoring, and security information monitoring. It is also referred to as security incident and event monitoring. SIEM is the primary centralized log correlation, aggregation, and normalization solution.