“The term SIEM++ is being used to refer to this next step in SIEM, which is designed for more current needs within security ops asking for automation, AI, and real-time responses. Hence, the increase in SIEM alongside other tools,” Context’s Turner says.
George McKenna, director at UK-based managed service provider Emerging T-Tech, tells CSO that the convergence of SIEM with XDR and SOAR enables enterprises to streamline operations, improve detection effectiveness, and reduce mean time to resolution.
“Legacy SIEM, while effective for log aggregation and correlation, lacks the granular visibility and automated response capabilities necessary in today’s threat landscape,” McKenna explains. “XDR addresses this gap by integrating endpoint, network, and cloud telemetry, providing a holistic view of potential threats.”
