It is an SIEM tool that can automatically collect all the event logs from all the systems present in the network.

It is an SIEM tool that can automatically collect all the event logs from all the systems present in the network.

• A. Process Monitor
• B. Autoruns for Windows
• C. Mirekusoft Install Monitor
• D. Splunk

Answer: (D)

Centralized log collection across the network is a key capability of a SIEM. Splunk is designed to ingest, index, and analyze logs from many systems, providing a single pane to search, correlate, and alert on data from across the environment. It can automatically collect Windows Event Logs and other logs from endpoints using forwarders or agents, enabling network-wide monitoring from one interface. The other tools specialize in on-host or specific-purpose tasks (like real-time activity on a single machine, startup applications, or installation monitoring) and aren’t built to aggregate event logs from multiple systems. So Splunk best fits the description.

Centralized log collection across the network is a key capability of a SIEM. Splunk is designed to ingest, index, and analyze logs from many systems, providing a single pane to search, correlate, and alert on data from across the environment. It can automatically collect Windows Event Logs and other logs from endpoints using forwarders or agents, enabling network-wide monitoring from one interface. The other tools specialize in on-host or specific-purpose tasks (like real-time activity on a single machine, startup applications, or installation monitoring) and aren’t built to aggregate event logs from multiple systems. So Splunk best fits the description.