Which type of ESM resources is able to create correlation events?

seenagape

11 years ago

A.
Rules and correlation data monitors

B.
Reports

C.
Trend tables

D.
Active and session lists

Explanation:
http://www.ndm.net/siem/arcsight/arcsight-esm