Security Applications

A tool for generating a Software Bill of Materials (SBOM) from container images and filesystems.

Password Management

Vulnerability Management

Vulnerability Scanner

Security Information Event Management (SIEM)

Combines SIM and SEM and provides real-time analysis of security alerts generated by network hardware and applications (1)

Log Management

Collection and storage of log messages and audit trails

splunk>

Security Information Management (SIM)

Storage, analysis and reporting of log/audit data

Security Event Management (SEM)

Real-time monitoring, correlation, notifications and console views

XDR

Gartner defines XDR as “a SaaS-based, vendor-specific, security threat detection and incident response tool that natively integrates multiple security products into a cohesive security operations system that unifies all licensed components.” (2)

Acronyms

EDR
MSS
NTA
RMF
SIEM
SIM
SEM
SECaaS
UEBA
XDR

Endpoint Detection and Response
Managed Security Service
Network Traffic Analysis
Risk Management Framework
Security Information Event Management
Security Information Management
Security Event Management
SECurity as a Service
User and Entity Behaviour Analytics
eXtended Detection and Response

Bibliography & References