TIM-8305: v1

Cichonski, P., Millar, T., Grance, T., & Scarfone, K. (2012). NIST special publication 800-61 Rev 2: computer security incident handling guide. National Institute of Standards and Technology, Gaithersburg MD.
Read Chapter 3 – Handling and Incident to learn about the incident response lifecycle.

González-Granadillo, G., González-Zarzosa, S., & Diaz, R. (2021). Security Information and Event Management (SIEM): Analysis, Trends, and Usage in Critical Infrastructures. Sensors (Basel, Switzerland), 21(14).
This article provides a list of proposed enhancements for the next generation of SIEMs and provides a review of existing solutions as well as an analysis of their benefits.

OSSIM, A. The open source siem.