{"id":17082,"date":"2025-08-21T17:04:32","date_gmt":"2025-08-21T15:04:32","guid":{"rendered":"https:\/\/www.ohb-ds.de\/wpml\/it-security\/newsletter\/alle-reden-ueber-das-thema-siem-wir-auch"},"modified":"2026-09-16T09:35:03","modified_gmt":"2026-09-16T07:35:03","slug":"everyones-talking-about-siemand-so-are-we","status":"publish","type":"newsletter","link":"https:\/\/www.ohb-ds.de\/en\/cyber-security\/newsletter\/everyones-talking-about-siemand-so-are-we","title":{"rendered":"Everyone’s talking about SIEM\u2014and so are we!"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\tWichtige Information<\/strong><\/br> zu Ihrer IT-Sicherheit<\/span>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\tWichtige Information<\/strong><\/br> zu Ihrer IT-Sicherheit<\/span>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Newsletter: Everyone’s talking about SIEM\u2014and so are we!<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Enterprise-level security that fits even SME budgets: Our SIEM makes it possible.<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Was ist eigentlich ein SIEM?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

All devices connected to a network log all tasks in one or more log files.<\/p>\n

A SIEM (Security Information and Event Management) system can process logs from a wide range of device and system categories.<\/p>\n

The following structured overview lists typical devices whose logs can be read and analyzed by a SIEM.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

All of these devices are potential points of vulnerability in a network:<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\t
Safety equipment <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
    \n
  • Firewalls (e.g., Cisco ASA, Palo Alto, Fortinet)<\/li>\n
  • Intrusion Detection\/Prevention Systems (IDS\/IPS) (e.g., Snort, Suricata)<\/li>\n
  • VPN gateways<\/li>\n
  • Web Application Firewalls (WAFs)<\/li>\n
  • Antivirus\/antimalware systems<\/li>\n
  • Endpoint Detection and Response (EDR)<\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t
    \n\t\t\t\t\n\t\t\t\t\t
    Network devices <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t
      \n
    • Router<\/li>\n
    • Switches<\/li>\n
    • Load Balancer<\/li>\n
    • Wireless Access Points<\/li>\n
    • Network Access Control (NAC)<\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t
      \n\t\t\t\t\n\t\t\t\t\t
      End devices <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
      \n\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t
      • Windows-, Linux-, macOS-Clients<\/li>
      • Mobile Ger\u00e4te (MDM-Systeme)<\/li>
      • IoT-Ger\u00e4te (je nach Protokoll und Logging-F\u00e4higkeit)<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t
        \n\t\t\t\t\n\t\t\t\t\t
        Servers and Operating Systems <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
        \n\t\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t
        • Windows Server (Event Logs)<\/li>
        • Linux\/Unix Server (Syslog, Auditd)<\/li>
        • Active Directory \/ LDAP<\/li>
        • DNS-Server<\/li>
        • DHCP-Server<\/li>
        • Mail-Server<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t
          \n\t\t\t\t\n\t\t\t\t\t
          Cloud services and platforms <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
          \n\t\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t\t\t\t\t
          • Microsoft 365 \/ Azure<\/li>
          • AWS CloudTrail \/ CloudWatch<\/li>
          • Google Cloud Platform (GCP)<\/li>
          • Cloud-Security-Tools (z.\u202fB. Prisma Cloud, Defender for Cloud)<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t
            \n\t\t\t\t\n\t\t\t\t\t
            Applications and Services <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
            \n\t\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t\t\t\t\t\t
            • Webserver (Apache, Nginx, IIS)<\/li>
            • Datenbanken (SQL Server, Oracle, MySQL, PostgreSQL)<\/li>
            • Applikationsserver (Tomcat, JBoss)<\/li>
            • SIEM-f\u00e4hige Business-Anwendungen (z.\u202fB. SAP, Salesforce)<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t
              \n\t\t\t\t\n\t\t\t\t\t
              Infrastructure and Management Systems <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
              \n\t\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t\t\t\t\t\t
              • Virtualisierungsplattformen (VMware, Hyper-V)<\/li>
              • Container-Orchestrierung (Kubernetes, Docker)<\/li>
              • Patch-Management-Systeme<\/li>
              • Backup- und Recovery-Systeme<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t
                \n\t\t\t\t\n\t\t\t\t\t
                Security solutions and tools <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
                \n\t\t\t\t\t
                \n\t\t\t\t
                \n\t\t\t\t
                \n\t\t\t\t\t\t\t\t\t
                • Threat Intelligence Feeds<\/li>
                • Security Orchestration, Automation and Response (SOAR)<\/li>
                • Vulnerability Scanner (z.\u202fB. Nessus, Qualys)<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  All logs are \u201cnaturally\u201d stored in various formats on their respective devices, so they must be \u201cnormalized\u201d into a uniform format. Once all the normalized logs are stored in a database, the database can be searched for\u00a0anomalies<\/strong>.<\/p>\n

                  Example<\/strong>: It is certainly not normal for an employee in financial accounting to log in to her computer at 1:00 a.m. -> The user login was logged in the log file, sent to the SIEM, and analyzed. The use case on the SIEM\u2014\u201csend an alert when administrative staff log in to a PC at night (10:00 PM \u2013 5:00 AM)\u201d\u2014will now trigger an alert.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

                  \n\t\t\t\t
                  \n\t\t\t\t\t

                  Faster detection - Fewer false alarms<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  A SIEM transforms the chaos of alerts into correlated and easily understandable information. Fewer false positives and more context enable faster threat detection and mitigation. In the fight against cyber attackers, every minute counts when it comes to protecting critical infrastructure and ensuring business continuity.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

                  \n\t\t\t\t
                  \n\t\t\t\t\t

                  Combination of SIEM and NDR<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  A SIEM covers all devices, so the only thing missing now is monitoring the network traffic.<\/p>\n

                  Network Detection and Response (NDR) refers to security solutions that continuously monitor and analyze network traffic to detect suspicious activity and respond to it automatically. Artificial intelligence (AI) and machine learning (ML) techniques are used to analyze network traffic and detect anomalies.<\/p>\n

                  Example<\/strong>: If a large amount of data is suddenly exchanged between a database server and a computer in the finance department at 1:00 a.m., it can be assumed that this is not normal. In this case, the AI will interrupt the connection, provided that this is specified in the rules.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t

                  Top 10 SIEM Use Cases<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  Below, we have provided a detailed explanation of 10 use cases for our SIEM system to illustrate the benefits of such a system.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t
                  \n\t\t\t\t\t\t
                  \n\t\t\t\t\n\t\t\t\t\t
                  1. Detection of compromised user credentials: <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  Ensure that you have a use case and a workflow in place to detect all attempts to compromise user credentials through brute force, pass-the-hash, golden ticket, or other methods. In the event of a successful compromise, it is important to identify the affected users and systems in order to assess the impact and prevent further damage.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t

                  \n\t\t\t\t\n\t\t\t\t\t
                  2. Tracking system changes: <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  Establish appropriate rules for flagging critical events, such as unauthorized changes to configurations or the deletion of audit trails. These changes should be escalated immediately to prevent damage and minimize further risks, as the manipulation of audit logs, for example, is always a warning sign.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t

                  \n\t\t\t\t\n\t\t\t\t\t
                  3.\u202fDetection of unusual behavior in privileged accounts: <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  Privileged users, such as system or database administrators, have advanced access privileges. This makes them an attractive target for hackers. With a SIEM solution, analysts can closely monitor all actions taken by these privileged users and look for unusual behavior that could indicate a threat or a compromise.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t

                  \n\t\t\t\t\n\t\t\t\t\t
                  4. Security for cloud-based applications: <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  Cloud computing offers numerous advantages, but it also presents several challenges: meeting new compliance requirements, improving user monitoring and access control, and preventing potential malware infections and data breaches. A SIEM solution should also support cloud-based applications as log data sources\u2014such as Salesforce, Office 365, or AWS\u2014to extend compliance monitoring and threat detection to the cloud environment.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t

                  \n\t\t\t\t\n\t\t\t\t\t
                  5. Detection of phishing attacks: <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  Phishing is an attempt to obtain sensitive information that can be used for identity fraud and identity theft. This includes attempts to obtain personal data such as Social Security numbers, bank account information, PIN codes, or passwords. Companies must ensure under all circumstances that this confidential information is protected throughout the organization. Phishing, particularly spear phishing, is frequently used to gain initial access to a network.<\/p>\n

                  When phishing emails are received, analysts can use SIEM to track who received them, clicked on the links they contained, or replied to the emails, enabling them to take immediate action to minimize the damage.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t

                  \n\t\t\t\t\n\t\t\t\t\t
                  6. Monitoring utilization and availability: <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  With a SIEM system, appropriate correlation rules, and alerts, it is possible to continuously monitor the utilization, availability, and response times of various servers and services. This allows for the early detection of disruptions and overloads, thereby preventing downtime and the associated costs.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t

                  \n\t\t\t\t\n\t\t\t\t\t
                  7. Log Data Management: <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  Ensure that you have a use case and a workflow in place to detect all attempts to compromise user credentials through brute force, pass-the-hash, golden ticket, or other methods. In the event of a successful compromise, it is important to identify the affected users and systems in order to assess the impact and prevent further damage.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t

                  \n\t\t\t\t\n\t\t\t\t\t
                  8. SIEM for GDPR, HIPAA, or PCI compliance: <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  Companies are subject to a wide range of compliance regulations, such as GDPR, HIPAA, and PCI. With a SIEM system, you can document when and by whom data was accessed, read, or copied, in order to meet compliance requirements and prevent violations.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t
                  \n\t\t\t\t\t\t
                  \n\t\t\t\t\n\t\t\t\t\t
                  9. Threat detection: <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  The process of actively searching for cyber risks within a company or network is known as \u201cthreat hunting.\u201d This search for threats can be conducted in response to a security issue or to detect new and unknown attacks or security breaches. \u201cThreat hunting\u201d requires access to security information from all areas of a company. A SIEM solution can provide this.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t

                  \n\t\t\t\t\n\t\t\t\t\t
                  10. SIEM for automation: <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  A SIEM solution automates threat detection activities and serves as the foundation for an automated response to security incidents. Forwarding security alerts and events to LogPoint SOAR enables an even faster response to security incidents by automating manual tasks. This not only boosts SOC productivity but also reduces costs. Start using LogPoint SOAR for one analyst free of charge as part of your SIEM license today.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t

                  What We Offer<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t

                  Our solution partner, Logpoint, has become one of the largest providers of SIEM and NDR in Europe. As a Danish company, it complies with all European compliance regulations.<\/p>\n

                  We can make it easier for our customers to get started with SIEM technology because we are able to offer individual licenses at \u20ac40 per month per device. Since implementing a SIEM is a long-term, ongoing process, this approach allows customers to roll it out one device at a time without having to purchase dozens of licenses that cannot be used right away.<\/p>\n

                  We can also handle the hosting of log data for you, so your company doesn’t have to make a significant investment in hardware.<\/p>\n

                  And with our expertise, we\u2019ll quickly help your company become more secure against cyberattacks.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

                  \n\t\t\t\t\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t
                  \n\t\t\t\t\t
                  <\/div>\n\t\t\t\t
                  \n\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t

                  Would you like to receive more information about IT security?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t

                  Then why not get in touch with our experts?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t
                  \n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tSchedule an initial consultation now<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t
                  \n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t<\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\tRequest a callback here<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
                  \n\t\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t
                  \n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"featured_media":17080,"template":"","meta":{"_acf_changed":false},"class_list":["post-17082","newsletter","type-newsletter","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.ohb-ds.de\/en\/wp-json\/wp\/v2\/newsletter\/17082","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ohb-ds.de\/en\/wp-json\/wp\/v2\/newsletter"}],"about":[{"href":"https:\/\/www.ohb-ds.de\/en\/wp-json\/wp\/v2\/types\/newsletter"}],"version-history":[{"count":11,"href":"https:\/\/www.ohb-ds.de\/en\/wp-json\/wp\/v2\/newsletter\/17082\/revisions"}],"predecessor-version":[{"id":18090,"href":"https:\/\/www.ohb-ds.de\/en\/wp-json\/wp\/v2\/newsletter\/17082\/revisions\/18090"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ohb-ds.de\/en\/wp-json\/wp\/v2\/media\/17080"}],"wp:attachment":[{"href":"https:\/\/www.ohb-ds.de\/en\/wp-json\/wp\/v2\/media?parent=17082"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}