Dell Trusted Device Installation and Administrator Guide v5.5

SIEM

Security Information Event Management (SIEM) solutions aggregate data from multiple sources in your enterprise. SIEM enables administrators to identify trends and unusual behavior or to perform real-time analysis of alerts that are generated by applications and hardware.

Data aggregated through SIEM can be transformed into charts and graphs on a dashboard to facilitate use. This helps administrators ensure that the enterprise maintains security compliance and protection against bad actors.

Trusted Device can interoperate with SIEM solutions and supports the following features:

• BIOS Verification
• BIOS Events & Indicators of Attack
• Image Capture
• Security Risk Protection Score

The Dell Event Repository must be installed to deliver Trusted Device results to a SIEM solution. See Download the Event Repository to download the Docker image.