SIEM

A SIEM centralizes an organization’s security logs to detect unusual behavior and respond to incidents. It aggregates sources, correlates events and raises alerts.

Ubidesk exports its audit log to your SIEM in Syslog format, with integrations for Splunk and Microsoft Sentinel, on the Business plan.

In practice

Cross-reference session events with your monitoring: an unusual off-hours session stands out much better inside the SIEM.