Bietet kleinen und mittleren IT-Teams und MSPs verwaltete Erkennung, automatisierte Reaktion und Compliance-Berichte ohne vollständiges internes Sicherheitsteam.
Log ingestion, normalization and correlation
1 year of searchable retention
Search and Investigate
Kategorien: SIEM
Detections built from threat intelligence
Continuously updated threat intelligence blocking (Automate)
Community blocking shared across customers
Kategorien: SIEM
Signature-based and behavior-based real-time detections
50-second median detection time
24/7 automated monitoring
Kategorien: SIEM
Kategorien: SIEM
Windows, Active Directory, Sysmon, Linux, macOS and cloud audit event logs collected and searchable for 1 year
Kategorien: SIEM
Firewall, switch, access point and VPC Flow Log sources
Investigate network connections
Kategorien: SIEM
Pre-built compliance reports for 11 frameworks including CIS Controls 8, CMMC, HIPAA/HITECH, ISO 27001/27002, NIST 800-171, PCI DSS and SOC 2
Scheduled delivery of reports
Kategorien: SIEM
Blumira Investigate search by user, IP address, port or application
Endpoint visibility of process execution, authentication events and system changes
Kategorien: Cybersicherheit
Automated and manual host isolation for P1-P3 threats
Dynamic blocklists for malicious IPs and domains via major firewalls
Microsoft 365, Azure and Entra compromised user lockout
Playbooks for every finding
Kategorien: Cybersicherheit
Blumira Agent telemetry collection on Windows, macOS and Linux
Automated or manual device isolation
Malicious process termination (Respond)
Kategorien: Cybersicherheit
Kategorien: Cybersicherheit
Pre-tuned prioritized findings
Alerts in under a minute of initial detection
Voice, email and text notifications
Kategorien: Cybersicherheit
Executive Summaries showing counts and kinds of identified threats with a 12-month trend (SIEM+ and XDR editions)
Kategorien: Cybersicherheit
Solution Architects conduct threat surface assessments and advise on security posture
Kategorien: Cybersicherheit
24/7 automated monitoring
Real-time findings with 50-second median detection time
Visibility across cloud and on-prem resources, with endpoint visibility in Respond and Automate
Kategorien: Cybersicherheit
Cloud sources via API
On-prem syslog via a lightweight virtual sensor
Endpoints via Blumira Agent
Kategorien: Log Management
Collects Windows, Linux and macOS endpoint events and Active Directory events
Collects cloud audit events such as AWS CloudTrail and Microsoft 365
Events searchable through Investigate
Kategorien: Log Management
Windows Server, IIS, Active Directory and Sysmon logs
Linux servers, Journald and auditd file integrity monitoring
Apache and Nginx web servers
VMware vSphere/vCenter
Kategorien: Log Management
Investigate visualizations
Responder, Manager and Security dashboards in paid editions
Scheduled and global reports
Kategorien: Log Management
Blumira handles parsing and native third-party integrations
Ingested data is normalized and correlated by the detection engine
Kategorien: Log Management
Blumira Investigate shows events, network, systems and users for a search term
Kategorien: Log Management
1 year of searchable log retention in every edition
Unlimited data ingestion
Kategorien: Log Management
Kategorien: Log Management
Kategorien: Log Management
1Jahr
Kategorien: Log Management
Gilt für: Automate Edition · Detect Edition · Respond Edition
Findings in Dashboards, Workflows oder Berichte übernehmen
Unbegrenzt
1Jahr
1Agent pro Mitarbeiter
Unbegrenzt
1Jahr
Unbegrenzt
1Jahr
1Agent pro Mitarbeiter
Erfahrungsberichte, vor der Veröffentlichung moderiert.
softosaur