Concept Overview
Core concepts behind SentriaOne xSIEM — where data comes from, how it is processed, and the capabilities that analyze and act on it.
Log Sources
What logs are, where they come from (end devices, network devices, and other sources), and how they flow into SentriaOne xSIEM for analysis.
Packet Mirroring
How packet mirroring provides a copy of raw network traffic for passive analysis by NDR and NPM.
Data Processing
Terminology for how SentriaOne xSIEM ingests and processes logs and raw traffic — transformation, normalization, enrichment, analysis, and detection.
SIEM
The concept of Security Information and Event Management (SIEM) and its role in SentriaOne xSIEM.
NDR
The concept of ML-based Network Detection and Response (NDR) and network traffic analysis in SentriaOne xSIEM.
NPM
The concept of Network Performance Monitoring (NPM) and application and network visibility in SentriaOne xSIEM.
Incident Response
The concept of Incident Response (IR) in SentriaOne xSIEM — turning detection details, flow, and recommendations into decisions and real actions.
Glossary
Definitions of terms used across the SentriaOne xSIEM documentation.