информационно-аналитическая система безопасности(collects and aggregates log data generated throughout the organization's technology infrastructure, from host systems and applications to network and security devices such as firewalls and antivirus filters.
The software then identifies and categorizes incidents and events, as well as analyzes them. The software delivers on two main objectives, which are to provide reports on security-related incidents and events, such as successful and failed logins, malware activity and other possible malicious activities, and to send alerts if analysis shows that an activity runs against predetermined rulesets and thus indicates a potential security issue Alex_Odeychuk)
