Oferece a equipes de TI pequenas e médias e a MSPs detecção gerenciada, resposta automatizada e relatórios de conformidade sem uma equipe de segurança interna completa.
Log ingestion, normalization and correlation
1 year of searchable retention
Search and Investigate
Categorias: SIEM
Detections built from threat intelligence
Continuously updated threat intelligence blocking (Automate)
Community blocking shared across customers
Categorias: SIEM
Signature-based and behavior-based real-time detections
50-second median detection time
24/7 automated monitoring
Categorias: SIEM
Categorias: SIEM
Windows, Active Directory, Sysmon, Linux, macOS and cloud audit event logs collected and searchable for 1 year
Categorias: SIEM
Firewall, switch, access point and VPC Flow Log sources
Investigate network connections
Categorias: SIEM
Pre-built compliance reports for 11 frameworks including CIS Controls 8, CMMC, HIPAA/HITECH, ISO 27001/27002, NIST 800-171, PCI DSS and SOC 2
Scheduled delivery of reports
Categorias: SIEM
Blumira Investigate search by user, IP address, port or application
Endpoint visibility of process execution, authentication events and system changes
Categorias: Cibersegurança
Automated and manual host isolation for P1-P3 threats
Dynamic blocklists for malicious IPs and domains via major firewalls
Microsoft 365, Azure and Entra compromised user lockout
Playbooks for every finding
Categorias: Cibersegurança
Blumira Agent telemetry collection on Windows, macOS and Linux
Automated or manual device isolation
Malicious process termination (Respond)
Categorias: Cibersegurança
Categorias: Cibersegurança
Pre-tuned prioritized findings
Alerts in under a minute of initial detection
Voice, email and text notifications
Categorias: Cibersegurança
Executive Summaries showing counts and kinds of identified threats with a 12-month trend (SIEM+ and XDR editions)
Categorias: Cibersegurança
Solution Architects conduct threat surface assessments and advise on security posture
Categorias: Cibersegurança
24/7 automated monitoring
Real-time findings with 50-second median detection time
Visibility across cloud and on-prem resources, with endpoint visibility in Respond and Automate
Categorias: Cibersegurança
Cloud sources via API
On-prem syslog via a lightweight virtual sensor
Endpoints via Blumira Agent
Categorias: Log Management
Collects Windows, Linux and macOS endpoint events and Active Directory events
Collects cloud audit events such as AWS CloudTrail and Microsoft 365
Events searchable through Investigate
Categorias: Log Management
Windows Server, IIS, Active Directory and Sysmon logs
Linux servers, Journald and auditd file integrity monitoring
Apache and Nginx web servers
VMware vSphere/vCenter
Categorias: Log Management
Investigate visualizations
Responder, Manager and Security dashboards in paid editions
Scheduled and global reports
Categorias: Log Management
Blumira handles parsing and native third-party integrations
Ingested data is normalized and correlated by the detection engine
Categorias: Log Management
Blumira Investigate shows events, network, systems and users for a search term
Categorias: Log Management
1 year of searchable log retention in every edition
Unlimited data ingestion
Categorias: Log Management
Categorias: Log Management
Categorias: Log Management
1ano
Categorias: Log Management
Aplica-se a: Automate Edition · Detect Edition · Respond Edition
Levar achados a painéis, fluxos de trabalho ou relatórios
Ilimitado
1ano
1agente por funcionário
Ilimitado
1ano
Ilimitado
1ano
1agente por funcionário
Experiências dos utilizadores, moderadas antes da publicação.
softosaur