Security Analyst - Data Review

DatabaseHead

I'm curious what type of data a security analyst would analyze. Firewall traffic, Logs on servers? Just trying to understand. Not looking to get into this area, but would like to fill in some gaps so I am not so idiotic when it comes to understanding these roles.

Thanks

markulous

Firewall logs, IDS logs, Event logs, netflow data, syslog, etc. Any DLP, FIM, IAM, etc., solutions you have, you can feed those back through your SIEM as well. All depends what tools you have in place and what your business does.