Reflect on how SIEMs are used in the workplace.

Answer these questions in a $1-$ to $2-$page reflection:

What is a SIEM and how does it work?

How can a SIEM help a SOC?

What are $4$ capabilities of a typical SIEM?

What are the $4$ components of a SIEM and what does each component do$?$

What are $3$ ways of implementing a SIEM? What are the advantages and disadvantages of each?

How did this week$$s readings, videos, and labs help you understand the importance of SIEMs?