Correlation Rules (2)

UTMStack is continuously fed event logs from a large number of sources in its organization's network. A correlation rule helps a SIEM solution in identifying which sequences of events would be an indication of anomalies to detect a security incident.