Дает малым и средним ИТ-командам и MSP управляемое обнаружение, автоматическое реагирование и отчеты о соответствии без полноценной собственной команды безопасности.
Log ingestion, normalization and correlation
1 year of searchable retention
Search and Investigate
Категории: SIEM
Detections built from threat intelligence
Continuously updated threat intelligence blocking (Automate)
Community blocking shared across customers
Категории: SIEM
Signature-based and behavior-based real-time detections
50-second median detection time
24/7 automated monitoring
Категории: SIEM
Категории: SIEM
Windows, Active Directory, Sysmon, Linux, macOS and cloud audit event logs collected and searchable for 1 year
Категории: SIEM
Firewall, switch, access point and VPC Flow Log sources
Investigate network connections
Категории: SIEM
Pre-built compliance reports for 11 frameworks including CIS Controls 8, CMMC, HIPAA/HITECH, ISO 27001/27002, NIST 800-171, PCI DSS and SOC 2
Scheduled delivery of reports
Категории: SIEM
Blumira Investigate search by user, IP address, port or application
Endpoint visibility of process execution, authentication events and system changes
Категории: Кибербезопасность
Automated and manual host isolation for P1-P3 threats
Dynamic blocklists for malicious IPs and domains via major firewalls
Microsoft 365, Azure and Entra compromised user lockout
Playbooks for every finding
Категории: Кибербезопасность
Blumira Agent telemetry collection on Windows, macOS and Linux
Automated or manual device isolation
Malicious process termination (Respond)
Категории: Кибербезопасность
Категории: Кибербезопасность
Pre-tuned prioritized findings
Alerts in under a minute of initial detection
Voice, email and text notifications
Категории: Кибербезопасность
Executive Summaries showing counts and kinds of identified threats with a 12-month trend (SIEM+ and XDR editions)
Категории: Кибербезопасность
Solution Architects conduct threat surface assessments and advise on security posture
Категории: Кибербезопасность
24/7 automated monitoring
Real-time findings with 50-second median detection time
Visibility across cloud and on-prem resources, with endpoint visibility in Respond and Automate
Категории: Кибербезопасность
Cloud sources via API
On-prem syslog via a lightweight virtual sensor
Endpoints via Blumira Agent
Категории: Log Management
Collects Windows, Linux and macOS endpoint events and Active Directory events
Collects cloud audit events such as AWS CloudTrail and Microsoft 365
Events searchable through Investigate
Категории: Log Management
Windows Server, IIS, Active Directory and Sysmon logs
Linux servers, Journald and auditd file integrity monitoring
Apache and Nginx web servers
VMware vSphere/vCenter
Категории: Log Management
Investigate visualizations
Responder, Manager and Security dashboards in paid editions
Scheduled and global reports
Категории: Log Management
Blumira handles parsing and native third-party integrations
Ingested data is normalized and correlated by the detection engine
Категории: Log Management
Blumira Investigate shows events, network, systems and users for a search term
Категории: Log Management
1 year of searchable log retention in every edition
Unlimited data ingestion
Категории: Log Management
Категории: Log Management
Категории: Log Management
1год
Категории: Log Management
Действует для: Automate Edition · Detect Edition · Respond Edition
Выводить находки в дашборды, рабочие процессы или отчеты
Без ограничений
1год
1агент на сотрудника
Без ограничений
1год
Без ограничений
1год
1агент на сотрудника
Опыт пользователей с модерацией перед публикацией.
softosaur