SIEM and log management tools are becoming increasingly popular as a method for diagnosing security problems. SIEM tools are increasingly useful in the growing tasks of incident response and forensics, experts say. Small and medium-sized companies are using SIEM data to do risk management, expert says. More than half of the respondents rated log-management tools as “very useful” for two primary functions: “forensics analysis and correlation” and “detecting/preventing unauthorized access and insider abuse””]
Source: https://www.darkreading.com/analytics/small-and-midsize-companies-take-new-directions-on-siem