SIEM+ user guide
This guide covers the end-user experience in SIEM+ 1.0.6, the current application version. SIEM+ brings alert processing, case management, security scoring, behavior analytics, compliance evidence, and reports into one workspace.
Start here
- Get started — sign in, choose an account, and understand access.
- Dashboard — read the current security and operations picture.
- Cases — investigate, collaborate, escalate, and close work.
- User behavior profiles — review account-scoped activity baselines and behavior indicators.
- Security score — review daily scores, trends, and improvement actions.
- Reports and compliance — view, export, and send reports, then prepare evidence for review.
- Agents — monitor scheduled automation and inspect execution history.
- Access history — review access to account data when you have account-management permissions.
Before you begin
Your administrator must provision your account and at least one account membership. What you can see depends on your account access and management permissions. Pages such as User Behavior Profiles, Agents, Accounts, and Admin appear only when your role permits them. Access history is available from account settings for account administrators and owners.
The header also provides the selected-account switcher, executive PDF export, in-app notifications, theme controls, and your user menu. The notification list is scoped to the selected account and current sign-in session.
The app displays its version in the interface and release notes. This guide is written for 1.0.6. If your deployment shows another version, use its matching documentation set when available.