Support
 
Support Get Quote
 
 
 
 

Advanced Threat Analytics

Reduce false positives using the whitelist feature in EventLog Analyzer

According to the Forbes, the number of hacking and intrusion incidents resulting in data breaches have increased, highlighting the importance of securing an organization's network. This often leads to IT administrators blacklisting essential data sources and a subsequent decrease in business productivity. To cater to the security needs of an organization without exposing the network to risks, administrators need to maintain a list of trustworthy sources. 

Whitelisting refers to the concept of explicitly authorizing known, trusted entities. They may appear to be malicious but will generally be harmless.

EventLog Analyzer, a log management tool, allows you to customize the list of admissible entities or sources. The tool enables you to whitelist IP addresses, URLs, and domains. It collects log information and correlates it with the list of the whitelisted sources to ensure that alerts are not triggered needlessly. 

reduce-false-positives-using-threat-whitelisting

For instance, global threat feeds often flag legitimate IP addresses that your enterprise uses as "malicious." EventLog Analyzer helps you whitelist such IPs, allowing them to bypass the security check. Further, it excludes whitelisted sources from threat alerts and external threat reports to help reduce the number of false positives, and simplify the threat management process.

Integration with Advanced Threat Analytics

EventLog Analyzer's Advanced Threat Analytics helps you identify malicious sources based on their reputation score. Threat whitelisting is integrated with Advanced Threat Analytics to reduce the number of false positives. 

For instance, let's use an IP address with a reputation score of 80. This address has been flagged as malicious even though it's trustworthy to your organization. EventLog Analyzer comes with an option to whitelist sources on the spot when the notification is shown. You can even whitelist multiple sources in a single click.

reduce-false-positives-using-threat-whitelisting

By combining the wealth of information from the collected logs and the database of global threat feeds, EventLog Analyzer gives you the necessary information on IPs, URLs, and domains to identify seemingly malicious yet useful sources, and whitelist them.

Secure your organization network with EventLog Analyzer.

EventLog Analyzer Trusted By

Los Alamos National Bank Michigan State University
Panasonic Comcast
Oklahoma State University IBM
Accenture Bank of America
Infosys
Ernst Young

Customer Speaks

  • Credit Union of Denver has been using EventLog Analyzer for more than four years for our internal user activity monitoring. EventLog Analyzer provides great value as a network forensic tool and for regulatory due diligence. This product can rapidly be scaled to meet our dynamic business needs.
    Benjamin Shumaker
    Vice President of IT / ISO
    Credit Union of Denver
  • The best thing, I like about the application, is the well structured GUI and the automated reports. This is a great help for network engineers to monitor all the devices in a single dashboard. The canned reports are a clever piece of work.
    Joseph Graziano, MCSE CCA VCP
    Senior Network Engineer
    Citadel
  • EventLog Analyzer has been a good event log reporting and alerting solution for our information technology needs. It minimizes the amount of time we spent on filtering through event logs and provides almost near real-time notification of administratively defined alerts.
    Joseph E. Veretto
    Operations Review Specialist
    Office of Information System
    Florida Department of Transportation
  • Windows Event logs and device Syslogs are a real time synopsis of what is happening on a computer or network. EventLog Analyzer is an economical, functional and easy-to-utilize tool that allows me to know what is going on in the network by pushing alerts and reports, both in real time and scheduled. It is a premium software Intrusion Detection System application.
    Jim Lloyd
    Information Systems Manager
    First Mountain Bank

Awards and Recognitions

  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
A Single Pane of Glass for Comprehensive Log Management