Sec+ 4.8 - Logging, SIEM, SOAR, and UEBA Explained SY0-701

🎯 Free Hub: https://professorerica.com/secplus • 📝 Practice Test: https://professorerica.com/secplus-practice - Logging and SIEM for CompTIA Security+ SY0-701: what to log (authentication, privilege changes, network flows), Windows Event IDs 4624/4625, Linux syslog, AWS CloudTrail, the SIEM workflow (collect, normalize, correlate, alert), Splunk, Microsoft Sentinel, IBM QRadar, NTP synchronization, syslog severity 0-7, retention for PCI DSS, HIPAA, and SOX, plus UEBA behavior analytics, NetFlow, and SOAR automation. Three quiz questions included. Watch the full Security+ playlist to master all five domains.

▶ Watch next: Sec+ 4.9 - Vulnerability Scanning and Penetration Testing SY0-701
https://www.youtube.com/watch?v=9GK3wNUeHjA

📺 Full playlist: CompTIA Security+ SY0-701 (2026)
https://www.youtube.com/playlist?list=PLlIAFxS29648Jbl7pSErloY2MfCmkI--g

Chapters:
0:00 Why Logging Matters: What to Capture
2:19 Log Sources: Windows, Linux, Cloud
4:13 Aggregation and the SIEM Workflow
6:08 NTP, Retention, and Syslog Severity
8:05 UEBA, NetFlow, and SOAR Automation
10:30 Quiz Time

#SecurityPlus #SY0701 #cybersecurity

---

Disclosure

The avatars and voices in this video are AI-generated. All content -- research, scripts, lesson design, and the custom video engine -- is created by a CISSP, CISM, and PMP certified professional with a Master's in Project Management, a B.S. in Information Technology, and a Doctorate in Business Administration in progress.

This channel exists to make learning accessible and straightforward.

CompTIA® and Security+® are registered trademarks of CompTIA, Inc. This channel is not affiliated with, endorsed by, or sponsored by CompTIA. All content is produced independently for educational purposes only. For official exam objectives, pricing, and policies visit comptia.org.

Видео Sec+ 4.8 - Logging, SIEM, SOAR, and UEBA Explained SY0-701 канала Professor Erica