Vigil IQ is the advanced TDIR engine within Log360 that helps enterprises identify, navigate, and investigate potential threats. This solution enables proactive and effective responses to mitigate security risks. With the high coverage to key security threats, intuitive analytics, and automated playbooks, Vigil IQ helps enterprises overcome their complex cybersecurity challenges—by enhancing mean time to detect (MTTD) and respond (MTTR), extended investigation of false positives, detecting low priority or non-real threats, and managing manual mitigation.
Log360's collects, processes, and analyzes log and event data utilizing its Analytics Engine (AE) which then classifies the information as notable security events, alerts, and behavioral insights for enhanced visibility and auditing. The data from the analytics engine is then passed on to Vigil IQ.
Vigil IQ uses different detection logic, and data enrichments such as threat feeds and IoCs to form threat rules that are applied in the correlation engine, UEBA module, and MITRE ATT&CK framework adoption system to identify potential risks and threats.
Vigil IQ's security analytics component then provides the ability to triage and investigate the detected security threats. Automated and pre-packaged playbooks can then be executed over the detected threat or incident to remediate the attack.
Log360 scans the deep and dark web continuously for leaked credentials associated with organizations, their employees, and third-party vendors. This ensures that you are alerted about potential security risks before potential damage.
Vigil IQ's investigation module has an exclusive inspection console that facilitates contextual assessment and unification of the exploit triad: users, devices, and processes. Along with this, external threat sources can also be analyzed for reputation scores.
Vigil IQ brings a right balance in adoption of proactive and reactive security approaches. It ensures equilibrium by blending the methodologies and techniques required to detect threats and risks. The investigation and remediation platform comes with prepackaged actionable insights for threat neutralization, risk mitigation, and impact analysis.
Vigil IQ comes with prepackaged correlation rules and anomaly cards that helps detect known security threats. The solution's incident management system granularly associates automated workflows for the threat rules to neutralize threats instantly.
Vigil IQ encompasses in itself a dual-layered threat detection system that includes smart threshold setting, dynamic learning, high coverage to spot threats accurately, and precise threat detection for improved reliability.
Constantly updated indicators of compromises (IoCs) in the Advanced Threat Analytics platform, behavioral analytics, granular rule-based correlation system, Vigil IQ can spot external threats with common attack vectors, insider attacks, identity-based attacks, ransomware, and more.
Vigil IQ delivers the right balance of proactive and reactive security approaches.
We wanted to make sure that one, we can check the box for different security features that our clients are looking for us to have, and two, we improve our security so that we can harden our security footprint.
Carter Ledyard
The drill-down options and visual dashboards make threat investigation much faster and easier. It’s a truly user-friendly solution.
Sundaram Business Services
Log360 helped detect insider threats, unusual login patterns, privilege escalations, and potential data exfiltration attempts in real time.
CIO, Northtown Automotive Companies
Before Log360, we were missing a centralized view of our entire infrastructure. Now, we can quickly detect potential threats and respond before they escalate.
ECSO 911
Log360's VigilIQ to improve threat detection and response with high-coverage detection, contextual investigation, and automated playbooks.
