Re: SOC and SIEM

[mustafa.aman.shah () gmail com]

Hi Raheel,

Basically SOC is a place which use as monitoring centre.  In the SOC, there are lot of task being running everyday 24/7 
all year round.  It's depend to the organization, what job they are trying to do. For example certain of SOC, will 
monitor the network security from threat such as malware, virus, misc activities and etc.

SOC will grab the traffic from their sensor which place at their remote site.  So that their top management will get 
the right information and total view of their organization threat level.

To do all these task, they need tools.. so they need such as SIEM.  SIEM will do correlation, analysis, passive 
inventory and vulnerability scanner.

There are many brand out there such as Alienvault, Arcsight, RSA, Q1Lab, Symantec, IBM and etc.

Hope can share info about SIEM and SOC in this forum.  I also need a lots of info to setup SOC.

Thanks.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------