Support
 
Support Get Quote
 
 
 
 

SIEM

Nyelaraske Kebutuhane SIEM karo EventLog Analyzer

EventLog Analyzer minangka solusi Security Information and Event Management (SIEM) sing paling efektif sing kasedhiya ing pasar. EventLog Analyzer memenuhi kabeh kemampuan SIEM kritis kayata agregasi log saka sumber heterogen, forensik log, korelasi prastawa, pratandha wektu-nyata, pemantauan integritas file, analisis log, pemantauan aktivitas pangguna, audit akses objek, lapuran kepatuhan, lan panyimpenan log..

Kemampuan EventLog Analyzer SIEM

Log Data Aggregation
Agregat log EventLog Analyzer saka sumber heterogen (sistem Windows, sistem Unix/Linux, Aplikasi, Database, Router, Switch lan piranti Syslog liyane) ana ing panggonan tengah. EventLog Analyzer nggunakake teknologi Universal Log Parsing and Indexing (ULPI) saengga sampeyan bisa ngecek data log endi wae Tanpa peduli sumber & format log.
Log Forensics
EventLog Analyzer nggawe penyelidikan forensik dadi gampang banget kanthi ngijini supaya sampeyan bisa migunakake fungsionalitas panelusuran log yang kuat kanggo nelusur log mentah lan uga log sing diformat lan langsung nggawe lapuran forensik adhedhasar asil panelusuran.
EventLog Analyzer ngijini administrator jaringan nggoleki log mentah kanggo nemtokake entri log sing cocok sing nyebabake aktivitas keamanan, nemokake wektu sing tepat ing prastawa keamanan sing cocok, sing miwiti kegiatan kasebut lan uga lokasi ing ngendi asale kegiatan kasebut.
Event Correlation and Alerting
Korelasi antarane prastawa lan produksi pratandha ing wektu nyata ngijini administrator jaringan supaya bisa netepake jaringan kanthi aman saka ancaman. Kanthi EventLog Analyzer sampeyan bisa ngatur aturan lan skrip kanggo nggayuh prastawa adhedhasar kotak ambang utawa prastawa anomali lan menehi katentuan nyata-wektu kanggo pelanggaran ambang utawa anomali jaringan.
Mesin korelasi sing kuat kuweke EventLog Analyzer digabungake karo luwih saka 70 aturan korelasi sing nutupi akses pangguna, log pangguna, integritas file, nggawe pangguna, kawicaksanan grup, panginstalan piranti lunak sing ora disengaja lan liya-liyane
File Integrity Monitoring
EventLog Analyzer ndadekake pemantauan integritas file wektu-nyata (FIM) kanthi nglindhungi data sensitif lan patemon syarat kepatuhan. Kanthi kemampuan mantau integritas file EventLog Analyzer, para profesional keamanan saiki bisa nglacak kabeh owah-owahan ing file lan folder kayata nalika file lan folder digawe, diakses, dideleng, dibusak, diowahi, diganti jeneng lan akeh liyane.
Log Analysis
EventLog Analyzer njalanake analisis log ing wektu-nyata lan nampilake data log sing dianalisis saengga grafik, grafik lan lapuran dadi luwih gampang dipahami. Pangguna kanthi gampang bisa ngobrol liwat data log sing ditampilake ing dasbor kanggo nggoleki wawasan liyane lan nglakoni analisis sebab ing itungan menit. Solusi kasebut uga menehi pratandha wektu-nyata adhedhasar intelijen ancaman ancaman paling anyar saka feed ancaman STIX/TAXII.
User Monitoring
Laporan sing kacathet diwenehake kanggo pemantauan pangguna dening EventLog Analyzer. Iki ndadekake kita bisa nglacak prilaku pangguna sing mencurigakan kalebu kedhaftar administratif sing duwe hak istimewa (PUMA).
Sampeyan entuk informasi sing tepat babagan akses pangguna kayata apa sing ditandangi pangguna, apa asil saka tumindake kuwi, ing server kasebut kedadeyan lan nglacak workstation pangguna saka ngendi tindakan kasebut dipicu.
Object Access Auditing
EventLog Analyzer ngijini sampeyan ngerti apa sing bener-bener kedaden ing file lan folder – sapa sing ngakses, mbusak, nyunting, dipindhah, ngendi file lan folder tindak, lsp. EventLog Analyzer nyedhiyakake laporan akses objek ing format sing ramah para pangguna (PDF lan CSV ) lan ngirim pratandha nalika file/folder sensitif diakses dening wong sing ora sah ing wektu-nyata liwat sms utawa email.
Sampeyan entuk informasi sing tepat babagan akses objek kayata apa sing ditandangi pangguna, apa asil saka tumindake kuwi, ing server kasebut kedadeyan lan nglacak workstation pangguna saka ngendi tindakan kasebut dipicu.
Compliance Reports
Kepatuhan minangka inti saka SIEM lan organisasi EventLog Analyzer bisa netepi syarat kepatuhan peraturan kanthi mantau lan nganalisis data log saka kabeh piranti jaringan lan aplikasi.EventLog Analyzer ngijini sampeyan kanggo ngasilake lapuran sing selaras sing wis ditetepake kayata PCI DSS, FISMA, GLBA, SOX, HIPAA, lsp.
EventLog Analyzer uga nyedhiyani fitur nilai tambah kanggo ngustomake lapuran kepatuhan sing ana lan uga ngijini pangguna nggawe lapuran kepatuhan anyar kanggo mbantu netepi tumindak supaya selaras karo peraturan anyar ing mangsa ngarep. Studi Kasus: Waca piye TRA nggawe lapuran Kepatuhan ISO 27001 kanggo netepi persyaratan kepatuhan.
Log Data Retention
EventLog Analyzer nyimpen data log riwayat kanggo menetpi syarat kepatuhan, kanggo nganakake pemeriksa forensik log lan kanggo audit internal. Kabeh data log sing disimpen digabung & distempel kanggo nggawe bukti kasebut. EventLog Analyzer nyimpen kabeh log sing digawe mesin - log sistem, log piranti & log aplikasi menyang gudang terpusat.
Video sing gegayutan

EventLog Analyzer Trusted By

Los Alamos National Bank Michigan State University
Panasonic Comcast
Oklahoma State University IBM
Accenture Bank of America
Infosys
Ernst Young

Customer Speaks

  • Credit Union of Denver has been using EventLog Analyzer for more than four years for our internal user activity monitoring. EventLog Analyzer provides great value as a network forensic tool and for regulatory due diligence. This product can rapidly be scaled to meet our dynamic business needs.
    Benjamin Shumaker
    Vice President of IT / ISO
    Credit Union of Denver
  • The best thing, I like about the application, is the well structured GUI and the automated reports. This is a great help for network engineers to monitor all the devices in a single dashboard. The canned reports are a clever piece of work.
    Joseph Graziano, MCSE CCA VCP
    Senior Network Engineer
    Citadel
  • EventLog Analyzer has been a good event log reporting and alerting solution for our information technology needs. It minimizes the amount of time we spent on filtering through event logs and provides almost near real-time notification of administratively defined alerts.
    Joseph E. Veretto
    Operations Review Specialist
    Office of Information System
    Florida Department of Transportation
  • Windows Event logs and device Syslogs are a real time synopsis of what is happening on a computer or network. EventLog Analyzer is an economical, functional and easy-to-utilize tool that allows me to know what is going on in the network by pushing alerts and reports, both in real time and scheduled. It is a premium software Intrusion Detection System application.
    Jim Lloyd
    Information Systems Manager
    First Mountain Bank

Awards and Recognitions

  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •