Introduction to SIEM

Walkthrough summary

Introduction to SIEM TryHackMe walkthrough with 12 answered prompts and lab methodology notes.

Sample prompts covered

• What does SIEM stand for?
  Open the walkthrough page to inspect the full answer and command flow.
• Is Registry-related activity host-centric or network-centric?
  Open the walkthrough page to inspect the full answer and command flow.
• Is VPN related activity host-centric or network-centric?
  Open the walkthrough page to inspect the full answer and command flow.
• In which location within a Linux environment are HTTP logs stored?
  Open the walkthrough page to inspect the full answer and command flow.
• Which Event ID is generated when event logs are removed?
  Open the walkthrough page to inspect the full answer and command flow.