Design security monitoring (SIEM) for a company

Hard · Whiteboard

A 2,000-person company with laptops, cloud accounts, SaaS apps and a VPN has no central security monitoring. Design it: what logs you collect, how you detect attacks, how alerts reach analysts, and how you keep false positives manageable.

Create a free account to answer it and get scored on what a strong answer covers.