InfoSec glossary
Security terms should connect to real work.
Use Blumira's glossary to move from definition to context. Each term should help your team understand the signal, the risk, and the next operational question.
Term decoder 78 terms indexed
How to use it
A definition is only useful when it clarifies the next decision.
- 01
Define
Get a plain-language meaning without losing technical accuracy.
- 02
Connect
See why the term matters in detection, identity, endpoint, cloud, or response work.
- 03
Act
Follow related terms, resources, or product paths when the concept becomes operational.
Featured terms
Start with concepts that show up in real security operations.
Detection
What is SIEM?
A SIEM collects security data, correlates events, and helps teams investigate and respond from a shared record.
Use it to compare retention, alert quality, investigation workflow, and reporting burden. Read the entry IdentityLAPS
Local Administrator Password Solution helps manage unique local admin passwords across Windows systems.
Use the concept to reduce reused local admin credentials and lateral movement risk. Read the entry NetworkNull session
A null session is an unauthenticated connection attempt to Windows network resources.
Use it to reason about exposure, legacy configuration, and reconnaissance signals. Read the entry NetworkPromiscuous mode
Promiscuous mode allows a network interface to receive traffic beyond frames addressed to itself.
Use it to understand packet capture, monitoring visibility, and network inspection tradeoffs. Read the entry ThreatsRansomware
Ransomware is malware that encrypts, steals, or disrupts data to pressure an organization for payment.
Use it to connect identity, endpoint, backup, and response readiness signals. Read the entry ThreatsLateral movement
Lateral movement is attacker activity that moves from one system, identity, or segment to another.
Use it to prioritize unusual authentication, admin tool use, and cross-host behavior. Read the entryTopic lanes
Browse by the kind of security question your team is answering.
Detection and response
Terms that shape how signals become investigations, cases, and reporting.
SIEMSyslogThreat intelligence
Identity and access
Concepts for privileged access, account abuse, and authentication risk.
LAPSDomain AdminPassword spraying
Network and infrastructure
Definitions for visibility, exposure, scanning, and protocol-level context.
Null sessionNmapPromiscuous mode
Threats and techniques
Attacker behaviors and tools that defenders need to recognize in telemetry.
RansomwareCobalt StrikeLateral movement
A-Z index
Security terms, grouped for fast scanning.
A
B
C
D
E
F
G
H
I
K
L
M
N
O
P
Q
R
S
T
W
From term to workflow
When the definition becomes a security operations problem, keep moving.
Use related resources to compare platforms, watch product workflows, or pressure-test your current domain security posture.