Platform Reference

Software running on a modern PC that displays and interacts with IBM i's traditional text-based screens, the interface most people mean by "green screen."

A security operations model in which AI agents use approved tools and context to perform bounded investigation, reporting, and response work under defined human governance.

A vendor label for a SIEM that uses AI in a core function such as detection, correlation, prioritization, or investigation.

A SIEM in which AI guides a broader share of the security workflow, often from prioritization and investigation through recommended or approved response.

The policies and technical controls that define which AI systems may use which data, perform which actions, and produce which evidence under human oversight.

A SIEM designed to use AI across security data, detection, investigation, and response rather than limiting AI to a separate assistant feature.

A SIEM that uses machine learning, generative AI, or both for one or more tasks such as detection, triage, investigation, or response.

The original IBM midrange business computer line, introduced in 1988, whose operating system evolved into today's IBM i running on IBM Power Systems.

A licensing option on IBM Power Systems hardware that lets a customer activate additional processor or memory capacity already installed in the machine, as needed, without a physical hardware change.

The relational database built directly into the IBM i operating system, rather than installed as a separate product.

A security approach that combines detection and response across several telemetry domains such as endpoint, identity, cloud, email, and network.

The date after which IBM stops issuing security patches, fixes, and official support for a given hardware generation or IBM i release.

A DB2 for i feature that automatically encrypts and decrypts specific database columns, added transparently without changing existing application code.

A SIEM that exposes approved, permission-aware security capabilities through AI agents, APIs, automations, dashboards, and service workflows as well as its normal interface.

The operating system descended from the original AS400's OS/400, now running on current IBM Power Systems hardware, with an integrated relational database (DB2 for i) built into the OS itself.

IBM's current server hardware line built on the Power processor architecture, the direct successor to System i/iSeries hardware and the platform current IBM i systems run on.

IBM's discontinued mid-range and entry-level virtualized SAN storage brand (V7000, V3700, and others), replaced by IBM FlashSystem in 2020.

A logically divided, independently running slice of a single physical IBM Power Systems server, each with its own operating system, memory, and processor allocation.

The open tape cartridge standard used by IBM's tape libraries and autoloaders, currently on its 10th generation (LTO-10, 40 TB native per cartridge).

A security service in which an outside team monitors detections, investigates activity, and performs or coordinates agreed response work for the customer.

A SIEM offered as an ongoing service by a third-party provider, rather than software an organization installs, tunes, and staffs itself.

The current generation of IBM Power Systems hardware, the newest platform a legacy AS400/IBM i workload can be migrated onto.

IBM's built-in virtualization layer for Power Systems hardware, the hypervisor that creates and manages LPARs.

A programming language, originally built for business reporting, that is still the dominant application language on IBM i systems today.

The process of receiving security events and telemetry from endpoints, identities, networks, cloud services, applications, and other sources into a SIEM or data platform.

The controlled flow that collects, parses, normalizes, enriches, filters, and routes security telemetry before a SIEM stores or analyzes it.

The completeness, accuracy, timeliness, consistency, and context of the telemetry a SIEM uses for detection and investigation.

The period and storage tier in which security events remain available for search, investigation, threat hunting, audit, or recovery.

Technology that coordinates security workflows across tools and automates defined investigation or response steps.

A security system that collects log and event data from across an organization's systems and analyzes it centrally to detect and alert on threats.

A compact, single-drive tape unit that automatically loads cartridges from a small internal magazine in sequence, without the multi-drive capacity or cost of a full tape library.

IBM's periodic incremental update to a given IBM i release, delivering new features and fixes without requiring a full operating system upgrade.

Security analytics that models normal activity for users, accounts, devices, and other entities so unusual behavior can be detected and investigated.

A disk-based backup appliance that presents itself to backup software exactly like a physical tape library or drive, so existing tape-based save jobs and scripts keep working unchanged.