Ofrece a equipos de TI pequeños y medianos y a MSP detección gestionada, respuesta automatizada e informes de cumplimiento sin un equipo de seguridad propio completo.
Log ingestion, normalization and correlation
1 year of searchable retention
Search and Investigate
Categorías: SIEM
Detections built from threat intelligence
Continuously updated threat intelligence blocking (Automate)
Community blocking shared across customers
Categorías: SIEM
Signature-based and behavior-based real-time detections
50-second median detection time
24/7 automated monitoring
Categorías: SIEM
Categorías: SIEM
Windows, Active Directory, Sysmon, Linux, macOS and cloud audit event logs collected and searchable for 1 year
Categorías: SIEM
Firewall, switch, access point and VPC Flow Log sources
Investigate network connections
Categorías: SIEM
Pre-built compliance reports for 11 frameworks including CIS Controls 8, CMMC, HIPAA/HITECH, ISO 27001/27002, NIST 800-171, PCI DSS and SOC 2
Scheduled delivery of reports
Categorías: SIEM
Blumira Investigate search by user, IP address, port or application
Endpoint visibility of process execution, authentication events and system changes
Categorías: Ciberseguridad
Automated and manual host isolation for P1-P3 threats
Dynamic blocklists for malicious IPs and domains via major firewalls
Microsoft 365, Azure and Entra compromised user lockout
Playbooks for every finding
Categorías: Ciberseguridad
Blumira Agent telemetry collection on Windows, macOS and Linux
Automated or manual device isolation
Malicious process termination (Respond)
Categorías: Ciberseguridad
Categorías: Ciberseguridad
Pre-tuned prioritized findings
Alerts in under a minute of initial detection
Voice, email and text notifications
Categorías: Ciberseguridad
Executive Summaries showing counts and kinds of identified threats with a 12-month trend (SIEM+ and XDR editions)
Categorías: Ciberseguridad
Solution Architects conduct threat surface assessments and advise on security posture
Categorías: Ciberseguridad
24/7 automated monitoring
Real-time findings with 50-second median detection time
Visibility across cloud and on-prem resources, with endpoint visibility in Respond and Automate
Categorías: Ciberseguridad
Cloud sources via API
On-prem syslog via a lightweight virtual sensor
Endpoints via Blumira Agent
Categorías: Log Management
Collects Windows, Linux and macOS endpoint events and Active Directory events
Collects cloud audit events such as AWS CloudTrail and Microsoft 365
Events searchable through Investigate
Categorías: Log Management
Windows Server, IIS, Active Directory and Sysmon logs
Linux servers, Journald and auditd file integrity monitoring
Apache and Nginx web servers
VMware vSphere/vCenter
Categorías: Log Management
Investigate visualizations
Responder, Manager and Security dashboards in paid editions
Scheduled and global reports
Categorías: Log Management
Blumira handles parsing and native third-party integrations
Ingested data is normalized and correlated by the detection engine
Categorías: Log Management
Blumira Investigate shows events, network, systems and users for a search term
Categorías: Log Management
1 year of searchable log retention in every edition
Unlimited data ingestion
Categorías: Log Management
Categorías: Log Management
Categorías: Log Management
1año
Categorías: Log Management
Se aplica a: Automate Edition · Detect Edition · Respond Edition
Llevar hallazgos a paneles, flujos de trabajo o informes
Sin límite
1año
1agente por empleado
Sin límite
1año
Sin límite
1año
1agente por empleado
Experiencias de usuarios, moderadas antes de publicarse.
softosaur