Security Incident Management and Correlation System

Through this technology, all logs can be correlated with each other. A large amount of logs is generated from network and security devices used within an organization. It is crucial that these logs are regularly monitored and analyzed by the personnel.

However, manually tracking the excessive amount of logs generated from numerous devices is not feasible. Therefore, it is of great importance for all logs from devices used in organizations to be centrally collected and managed. Additionally, due to the obligation imposed by Law No. 5651, some system and user logs need to be collected, proven immutable, and stored. Log management systems enable compliance with this law. In order to detect suspicious situations that may arise in various logs collected from systems, it is necessary for the logs to be correlated.

Through information security and event management (SIEM) systems, suspicious events that may escape human observation can be clearly identified by correlating logs. Although it is necessary to collect logs with log management systems, it is not sufficient. These collected logs need to be correlated with each other and automatically analyzed, hence the importance of SIEM systems. Advanced SIEM solutions come with new features that allow for automatic actions to be taken. Cyber attacks can be automatically stopped and reported. Throughout all processes, we, as the NSC technical team, provide support to our customers.