Preface 17novdocx (en) 7 January 2010PrefaceSentinelTM is a security information and event management solution that receives information frommany sources throughout an enterprise, standardizes it, prioritizes it and presents it to you to makethreat, risk and policy related decisions. Chapter 1, “Sentinel Control Center,” on page 21 Chapter 2, “Active Views Tab,” on page 35 Chapter 3, “Correlation Tab,” on page 65 Chapter 4, “Incidents Tab,” on page 93 Chapter 5, “iTRAC Workflows,” on page 107 Chapter 6, “Work Items,” on page 147 Chapter 7, “Analysis Tab,” on page 153 Chapter 8, “Advisor Usage and Maintenance,” on page 159 Chapter 9, “Download Manager,” on page 173 Chapter 10, “Event Source Management,” on page 179 Chapter 11, “Administration,” on page 227 Chapter 12, “Sentinel Data Manager,” on page 281 Chapter 13, “Utilities,” on page 291 Chapter 14, “Quick Start,” on page 307 Chapter 15, “Solution Packs,” on page 331 Chapter 16, “Actions and Integrator,” on page 365 Chapter 17, “Sentinel Link Solution,” on page 393 Chapter 18, “Identity Integration,” on page 431 Appendix A, “Sentinel Architecture,” on page 441 Appendix B, “System Events for Sentinel,” on page 467AudienceThis documentation is intended for Information Security Professionals.FeedbackWe want to hear your comments and suggestions about this manual and the other documentationincluded with this product. Please use the User Comments feature at the bottom of each page of theonline documentation and enter your comments there.Additional DocumentationSentinel Technical documentation is broken down into several different volumes. They are: Sentinel 6.1 Installation Guide
