# SIEM Fundamentals

> Master the brain of the SOC. Explore Security Information and Event Management (SIEM) architecture, log ingestion, parsing, normalization, and correlation rules.

Canonical: https://codelivly.com/rooms/siem-fundamentals
Last updated: 2026-07-05

| | |
|---|---|
| Level | Intermediate |
| Category | Cybersecurity |
| Lessons | 4 |
| Estimated time | 30 min |
| XP | 200 |

Dive into the core technology that powers modern Security Operations Centers. The SIEM Fundamentals module breaks down how Security Information and Event Management systems collect, parse, and analyze massive volumes of log data.

You will learn the architecture of a SIEM, the critical difference between log ingestion, parsing, and normalization, and how correlation rules turn raw noise into actionable security alerts. By the end of this module, you will understand how the SIEM acts as the central nervous system of the SOC and how to effectively manage its data pipeline.

## Lessons

1. What is a SIEM and Why It Matters (30 min)
2. SIEM Architecture (30 min)
3. Popular SIEM Platforms Overview (30 min)
4. Writing Your First Search Query (30 min)

## Related

- [Learning path: SOC Fundamentals](https://codelivly.com/learning-paths/soc-fundamentals)
- [All rooms](https://codelivly.com/rooms)