The Advanced Security Information Model in Microsoft Sentinel, which maps data from many vendors onto shared schemas so one query or detection rule works whatever the source.
Also called Advanced Security Information Model.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains ASIM in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Sentinel
Microsoft's cloud-native SIEM, with SOAR capabilities, which stores and queries its data in a Log Analytics workspace.
- MAPS
Short for Microsoft Active Protection Service. It gives Microsoft Defender Antivirus cloud verdicts on suspect files in seconds, and features like file indicators stop working if it is turned off or blocked.