Cybersecurity definition
What is Telemetry?
By Cyber Tool Stack Editorial TeamUpdated
Definition
The stream of activity data — process starts, file changes, network connections — that an agent continuously records and sends to a central system for analysis.
Where Telemetry fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
AgentA small piece of software installed on a device that collects activity data and can take local action, such as blocking a process or isolating the machine from the network.SIEMSecurity Information and Event ManagementA central system that collects logs from across an environment, correlates them into alerts using detection rules and behavioral baselining, and lets analysts search historical activity during an investigation.UEBAUser and Entity Behavior AnalyticsAnalytics that baseline what's normal for a given user or system and flag deviations from that baseline, catching suspicious activity even without a matching rule.