Effective threat management requires security teams to combine security analytics with machine-generated data. Tools such as network traffic analysis, endpoint detection, security information and event management (SIEM), and user behavior analytics (UBA) harvest this data. This mix of data can help uncover unknown threats, but it can also confuse some security operations professionals who are not familiar with it when the data is only partially displayed. For example, a network link analysis diagram or, more simply, a list of network connections can be very informative because it shows critical data sources.”]

