With so many data types to analyze it is important to have a way to interpret information in a universal
format.
Some systems meet this need with the ability to collect data in multiple forms just to give you an idea
of what type of event correlation can be done on a sim.
We're going to take a look at the solar winds some server.
So here is just the solar winds demo server that you can log into in under the monitor tab with the
security option.
You can see a list of security events.
So click on that.
If you look through here in the tool Elyas column you can see the different sources of these events.
So we have windows log on events firewall denied connections as well as viruses that have been detected
from the micro try and office scan tool.
So as you can see we have all these different tools feeding in information and we can view everything
from a central management point within the sim system
to help the security community speak a common language.
One referencing security data beris was created bears as a set of metrics designed to provide a common
language for describing security incidents in a structured and reputable manner.
If you'd like to read into various more I have the link available in the resources for this lecture.