[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-672247-105":59,"doc-detail-672247-en":129},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":122,"head_meta":124,"extra_data":126,"updated_unix":128},105,"en","fortisiem-data-sheet-next-gen-siem-security","FortiSIEM - Data Sheet - Next-Gen SIEM Security","","FortiSIEM is a next-generation SIEM platform built to strengthen security operations and attack protection through advanced analytics and automated workflows. It unifies universal event collection across IT/OT multivendor environments, correlates and normalizes events, and supports flexible agent-based ingestion. Built-in CMDB enables asset identification, monitoring, and threshold alerting for incident investigations. AI-driven UEBA and large correlation rule coverage, enriched by FortiGuard intelligence, provide realtime risk scoring and prioritized incidents. Agentic GenAI assistance and integrated SOAR playbooks streamline investigation, response, and threat hunting, with deployment options for on-prem, cloud, or SaaS.",{"@graph":69,"@context":121},[70,84,104],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/fortisiem-data-sheet-next-gen-siem-security/672247/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":98,"encodingFormat":97,"isAccessibleForFree":99,"interactionStatistic":100},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/fortisiem-data-sheet-next-gen-siem-security/672247.png","ImageObject",300,407,{"name":92,"@type":93},"8796093062539","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-02",true,{"@type":101,"interactionType":102,"userInteractionCount":14},"InteractionCounter",{"@type":103},"ViewAction",{"@type":105,"mainEntity":106},"FAQPage",[107,113,117],{"name":108,"@type":109,"acceptedAnswer":110},"FortiSIEM how collects and normalizes security events across environments?","Question",{"text":111,"@type":112},"FortiSIEM collects, correlates, and normalizes events/alerts from hundreds of IT/OT multivendor sources across cloud or on-prem setups. It uses Generic API integrations, inbound webhooks, and flexible agent technology to support high-speed ingestion and tagging at the source.","Answer",{"name":114,"@type":109,"acceptedAnswer":115},"How does FortiSIEM manage IT/OT assets for incident investigations?",{"text":116,"@type":112},"FortiSIEM includes a built-in CMDB that automatically identifies and categorizes assets. It supports collection, monitoring, and threshold alerting for essential asset health metrics, and the CMDB data helps analysts locate affected assets during investigations.",{"name":118,"@type":109,"acceptedAnswer":119},"What risk and detection capabilities does FortiSIEM provide in realtime?",{"text":120,"@type":112},"FortiSIEM provides realtime incident detection with severity ratings and dynamically scores associated users and hosts. Risk scoring considers asset criticality and the type and volume of associated incidents and vulnerabilities, while AI-driven behavioral threat detection uses UEBA and correlation rules updated via threat intelligence.","https://schema.org",{"og:url":83,"og:type":123,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":125,"canonical":83},"index,follow",{"doc_id":127,"site_id":62},672247,1793587746,{"code":4,"msg":5,"data":130},{"doc_id":127,"user_id":131,"nickname":92,"user_avatar":66,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":132,"file_id":133,"file_url":134,"file_type":135,"file_size":136,"view_count":14,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":137,"language":138,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":139,"faqs":140,"seo_title":141,"seo_description":67,"update_tm":128,"read_time":142},8796093062539,"Data Sheet  \nFortiSIEM®  \nAvailable in:  \nAppliance  \nDelivering on the promise of next-gen SIEM security  \nFortiSIEM is designed to be the backbone of your security operations team and attack protection. It provides a unique, high-performance IT/OT SIEM feature set built on advanced analytics, inbuilt configuration management database (CMDB), native SOAR automation, and the latest in agentic GenAI assistance. Delivering out-of-the-box value, complete flexibility, and ultimate scale, it’s the right solution for organizations and MSSPs of any size.  \n1  \nHighlights  \n• Universal event collection  \n• IT/OT asset CMDB with discovery and monitoring  \n• Advanced behavioral threat detection using AI  \n• Realtime detection and risk scoring  \n• Rich investigation and response features  \n• FortiAI-Assist GenAI  \n• Built in SOAR automation  \n• Compliance reporting  \n• Distributed processing and massive scalability  \n• Multitenancy and other MSSP-focused features  \n• Simple management and exceptional TCO  \n• Deploy on-prem, in cloud, or a SaaS global service  \nHighlights  \nUniversal event collection  \nFortiSIEM collects, correlates, and normalizes events/alerts from hundreds of IT/OT multivendor sources across any cloud or on-prem environment. FortiSIEM Generic API integrations and inbound webhook allows for customize support of API and SaaS based services. FortiSIEM flexible agent technology supports high speed ingestion and can filter and tag events at the source. Advanced Endpoint Agents can be used to directly collect detailed information such as file integrity monitoring and support built-in Osquery for advanced threat hunting and investigations.  \nIT/OT asset CMDB with discovery and monitoring  \nFortiSIEM supports a built-in Configuration Management Database (CMDB) that provides automatic asset identification and categorization, as well as the collection, monitoring, and threshold alerting of essential asset health metrics. Active polling employs a range of methods to collect metrics, including availability, performance, resource utilization, and configuration changes. CMDB information and asset categorization are also helpful during the incident investigation, providing insights into affected assets and simplifying analyst search queries.  \nAdvanced behavioral threat detection using AI  \nFortiSIEM uniquely detects attacks using a wide variety of methods and a distributed processing architecture. Tunable UEBA ML and over 2800 IT/OT correlation rules that are updated and powered by the latest threat available threat intelligence. Customers can import additional rules from the open-source SIGMA library and create or customize their own rules. Additionally, the inbuilt ML workbench, designed for ease of use, makes it straightforward for customers to build, train, and deploy their ML-based detections, all within FortiSIEM.  \nFortiGuard threat intelligence and more  \nFortiGuard Threat Intelligence integrated within FortiSIEM expands and improves incident detection. FortiSIEM can import threat intelligence feeds from a wide variety of independent sources to power threat detection, incident enrichment, and threat hunting. FortiGuard intelligence value-added features include Outbreak Detections, which provide intelligence, detection rules, and threat hunting procedures on for newly discovered security attacks.  \nRealtime risk-based threat scoring  \nFortiSIEM provides a clear view of incidents, prioritized through severity ratings while dynamically scoring the associated users and hosts. FortiSIEM risk scoring considers  \nasset criticality, the type and volume of associated incidents and vulnerabilities. With a comprehensive approach to identify the severity and risk, security teams can more effectively manage and mitigate risks.  \nHighlights  \nRich investigation, response, and agent features  \nFortiSIEM offers a robust incident investigation experience, starting with the auto-enrichment of incidents and automatic risk evaluation. Events ar","cbCaipyTVjZ7hkht","https://ap.wps.com/l/cbCaipyTVjZ7hkht","pdf",3674855,14,"English","# Highlights\n## Universal event collection\n## IT/OT asset CMDB with discovery and monitoring\n## Advanced behavioral threat detection using AI\n## FortiGuard threat intelligence and more\n## Realtime risk-based threat scoring\n## Rich investigation, response, and agent features\n## FortiAI-Assist agentic GenAI\n## Built in SOAR automation\n## Data Sovereignty","[{\"question\":\"FortiSIEM how collects and normalizes security events across environments?\",\"answer\":\"FortiSIEM collects, correlates, and normalizes events/alerts from hundreds of IT/OT multivendor sources across cloud or on-prem setups. It uses Generic API integrations, inbound webhooks, and flexible agent technology to support high-speed ingestion and tagging at the source.\"},{\"question\":\"How does FortiSIEM manage IT/OT assets for incident investigations?\",\"answer\":\"FortiSIEM includes a built-in CMDB that automatically identifies and categorizes assets. It supports collection, monitoring, and threshold alerting for essential asset health metrics, and the CMDB data helps analysts locate affected assets during investigations.\"},{\"question\":\"What risk and detection capabilities does FortiSIEM provide in realtime?\",\"answer\":\"FortiSIEM provides realtime incident detection with severity ratings and dynamically scores associated users and hosts. Risk scoring considers asset criticality and the type and volume of associated incidents and vulnerabilities, while AI-driven behavioral threat detection uses UEBA and correlation rules updated via threat intelligence.\"}]","FortiSIEM - Data Sheet - Next-Gen SIEM Security | PDF",35]