Respuesta :
Threat intelligence feed usage feature can help filter multiple alerts detected by different devices for the same event into a single alarm.
What is SIEM?
A centralized enterprise security log management and analysis tool is a SIEM system. In order for an organization to be able to respond to potential risks, it centrally automates all of the effort involved in gathering logged information and producing reports.
Threat intelligence feed usage: The majority of SIEM platforms may take in threat intelligence information identifying whether IP addresses, domains, websites, or other logical entities are currently linked to harmful activity.
To stay up with the most recent threats, it is increasingly vital to have a SIEM system that continuously gathers the most recent threat intelligence and effectively uses that data to identify potential issues.
Instead of requiring the use of a specific feed, a SIEM system that permits using the threat intelligence feeds of the organization's choice offers more flexibility and enables the usage of the same feed provider across corporate security controls.
To know more about SIEM, visit: https://brainly.com/question/25720881
#SPJ4
