Installation and configuration of the SIEM platform.
Integration with log sources (firewalls, IDS/IPS, servers, applications, databases, etc.)
Implementation of log collection, normalization and correlation.
Fine-tuning alert thresholds and rules.