We already have SIEM installed. Why should we need PT ISIM?

Модератор 4 years ago in FAQ updated 4 years ago 1

SIEM and ISIM serve different purposes. If you have one, it does not mean that you do not need the other.

SIEM is a centralized and unified system for collecting, analyzing, and correlating network events. The primary purpose of SIEM is to set up a single point where information about suspicious events and incidents is collected, including information received from individual systems such as PT ISIM. PT ISIM is a specialized tool for detecting cyberattacks in industrial networks and can be used as a source of data for SIEM.