A SIEM system combines outputs from multiple sources .
A SIEM system uses alarm filtering techniques to distinguish malicious activity from false alarms .
A SIEM system combines outputs from multiple sources , and uses alarm filtering techniques to distinguish malicious activity from false alarms .