SIEM, in plain terms

Your servers and workstations keep a running diary of what happens on them: sign-ins, changes, programs starting and stopping. Those diaries are called logs. Spread across many machines, they are easy to overlook. SIEM collects them in one place and connects related events, so a quiet attack that touches several computers is easier to see, and easier to understand afterward.

What you get

• One view of your security events. Logs from your managed servers and workstations are collected in one place instead of scattered machine by machine.
• Patterns that single tools miss. Related events are connected, so a quiet attack spread across several systems is easier to spot.
• Watched on nights, weekends, and holidays. On Gold and Platinum plans, a security operations center monitors SIEM activity the same way it monitors EDR, 24 hours a day, 365 days a year. Suspicious activity is reviewed, flagged, and escalated. Neatoware’s own follow-up and support follow your plan’s response targets, and targets are not guarantees.
• A record ready when you need it. When something happens, the history of what led up to it is already collected in one place. That can include activity from your backup systems.
• Works with your other defenses. SIEM adds context to endpoint detection and response, so alerts make more sense and the security operations center sees more of the story.

Which plans include this

SIEM is included on Gold and Platinum plans, alongside managed EDR. On those plans, a security operations center monitors it 24 hours a day, 365 days a year. The help desk is available Monday to Friday, 9 AM to 5 PM ET. Neatoware’s own follow-up and support follow your plan’s response targets, and targets are not guarantees. See Plans.

Common questions

What is SIEM?

Security information and event management. It collects the activity records, called logs, from your managed servers and workstations, and connects them so suspicious activity is easier to find.

How is SIEM different from EDR?

EDR watches what happens on each server and workstation. SIEM looks across them at once to connect the dots.

Is SIEM part of my plan?

Yes, on Gold and Platinum plans. Ask us how it fits your setup.

Does the security operations center fix problems itself?

Not by itself. When a threat is confirmed on a device with managed EDR, it can isolate that device from the network. Cleanup and repair are Neatoware’s job, following your plan’s response targets.

See the whole picture

Ask us how SIEM fits your Gold or Platinum plan. A real person will get back to you.