Ayuda a los equipos de seguridad a detectar, investigar y responder a ciberataques y cumplir normativas, consolidando logs y telemetría de seguridad, aplicando detecciones y automatizando la respuesta.
Auto-discovery and ingestion of Windows and syslog sources
Scheduled imports and agent-based collection
Gateway server for remote sites
Cloud sources including AWS, Azure, GCP, Salesforce and Microsoft 365
Categorías: Log Management
Collect Windows and syslog event logs
Event correlation across sources
Reports with drill-down to raw logs
Categorías: Log Management
Ingest logs from Windows, syslog, domain controllers, database servers and SQL/IIS servers
Categorías: Log Management
Dashboards and 1000+ analytical widgets
Graphs and charts in reports
MITRE ATT&CK views
Categorías: Log Management
Log-based monitoring of Active Directory, database and other servers
Alerts on repeated failed SUDO commands, abnormal SQL activity and unusual shutdowns or restarts
Categorías: Log Management
750+ pre-built log parsers
Custom parser for human-readable logs with 20 auto-identified fields
Field Extraction UI for RegEx patterns
Categorías: Log Management
Automatic archiving and encryption of logs, by default every seven days and customizable
Retention for SOX, GDPR and PCI DSS compliance
Categorías: Log Management
Correlation rules and anomaly detection
Threat-intel, geolocation and user-identity enrichment
Predefined and custom reports and 30+ compliance templates
Categorías: Log Analysis
1000+ analytical widgets and custom widgets
Graphs and charts in reports
MITRE ATT&CK visualizations
Categorías: Log Analysis
Auto-discover Windows and syslog devices and ingest event logs
Track AD changes and firewall rule modifications in reports
Categorías: Log Analysis
Automatic discovery of Windows and syslog sources
Scheduled imports from databases and vulnerability scanners
Agent-based collection and gateway server for remote sites
Cloud sources: AWS, Azure, GCP, Salesforce
Categorías: Log Analysis
UEBA baselines per user and entity with peer grouping and risk scoring
ML adaptive thresholds
Detect abnormal logins, privilege misuse and impossible travel
Categorías: Log Analysis
Real-time monitoring of Active Directory, databases, network devices, applications, endpoints and cloud platforms
Dashboards, security analytics consoles and alert profiles for suspicious events
Categorías: Log Analysis
Search 25,000 logs per second with boolean, range and group options
Save searches as alert profiles or export as reports
Drill down to raw logs
Categorías: Log Analysis
Real-time log collection, correlation and analysis
Built-in high availability for continuous monitoring
Categorías: Log Analysis
Ingest and normalize feeds from 10+ sources and formats (STIX/TAXII, CSV, JSON, API) including Webroot, VirusTotal, AlienVault OTX and Constella
Enrich alerts with IP reputation, geolocation and IoCs
Score alerts as Critical, Trouble or Attention
Categorías: Threat Intelligence
Visual SOAR playbooks with 50-60+ default templates
Block IPs, force password resets, revoke roles, isolate hosts
Restart machines, log off users, stop services, kill processes, run scripts via the ManageEngine agent
Every action logged with audit trail
Categorías: Threat Intelligence
UEBA tracking of user and entity activity against baselines
Audit privileged user activity, file integrity and database changes with alerts
Categorías: Threat Intelligence
Import vulnerability scanner data
Security and risk posture assessment for misconfigurations in Active Directory and MS SQL servers
Categorías: Threat Intelligence
Monitor authentication logs, firewall events and network traffic
Check outbound communication against threat feeds and alert the SOC
Dark web monitoring for leaked credentials and personal data
Categorías: Threat Intelligence
2000+ MITRE-mapped detections for ransomware indicators, APT stages, malicious URLs and worm-like activity
VirusTotal checks of files, URLs and domains
Categorías: Threat Intelligence
Incident Workbench consolidates alerts, correlated events and risk context into one timeline
AI-generated user and incident timelines
Push incidents to ServiceNow or Jira
Categorías: Threat Intelligence
Experiencias de usuarios, moderadas antes de publicarse.
softosaur