
Use cases increase efficiency
Properly set up use cases greatly increase the efficiency of the SIEM. Incorrect alerts, which tie up the full attention of an IT security analyst for a certain period of time, are significantly reduced. Conversely, threats to the IT infrastructure are immediately recognised as "unusual behaviour" and automatically trigger an alert that sets off a chain reaction.