2
Setting a new standard in Security Information and Event Management (SIEM), LogRhythm eliminates many of the architectural limitations and significant blind spots inherent in first generation products. Designed to address an ever- changing landscape of threats and challenges, with a full suite of high-performance tools for compliance, security and operations, LogRhythm delivers comprehensive, useful and actionable visibility into what is really going on in and around an enterprise IT Environment. LogRhythm’s SIEM 2.0 platform delivers: Fully Integrated Log & Event Management Distinct from legacy SIEM solutions, LogRhythm fully integrates traditionally separate log management and security event management functions to collect, analyze and correlate log data – with a single console for operating and administering all components. Collecting data from any source, LogRhythm’s SIEM 2.0 platform builds on an advanced data management structure with extensive data enrichment to analyze all log data in real-time. Automated risk-based prioritization, powerful forensics, advanced visualization and alerting in a simple-to-use GUI empowers organizations to gain unprecedented visibility and control over their enterprise IT environment. Correlation That Works LogRhythm delivers advanced correlation and pattern recognition via a simple, drag and drop GUI, delivering accessible functionality that is easily tailored to fit any environment. Extensive out-of-the-box rules combined with a nearly limitless ability to easily create or modify rules for targeting specific behavior patterns or casting a wider net, deliver comprehensive protection specific to your environment. LogRhythm performs real-time analysis of all log data using TrueTime™ for accurate event sequencing and maximum precision. With a practical combination of flexibility, usability and comprehensive data analysis, LogRhythm delivers real-time visibility to risks, threats and critical operations issues that are otherwise undetectable in any practical way. Robust Forensic Search and Drill-Down With wizard-based reports and investigations, fully interactive visualization tools with click-through drill-down, and extensive data enrichment, LogRhythm displays powerful forensic capabilities through a single, universal console, giving immediate access to the right data at the right time. Full integration allows forensic investigations to be easily conducted directly from any alarm or event. Users can sort and filter on any combination of over 50 metadata fields, with immediate access to all relevant log data and the surrounding context tied to any event. Extended Visibility and Context LogRhythm delivers enterprise wide visibility from core systems to the endpoint – tying all event data to easily accessed and highly relevant network, host and user-related context. Users can right-click for immediate access to host, network and user-related context, perform extended event correlation or create detailed and/or summary reports. To fill any gaps in coverage, LogRhythm independently monitors user and process activity, network connections, file integrity and data movement to removable media. Easy to Use, Deploy and Scale A universal console with a highly intuitive, wizard-based toolset, automated reports and alerts, and a fully interactive, streamlined interface makes learning and using LogRhythm easy. Centralized monitoring and management of all components through the same interface and a self-maintaining database keep administrative overhead minimal. LogRhythm’s building block architecture, turnkey software and hardware appliances and a highly flexible set of deployment options enable easy implementation and scalability to meet the performance requirements of even the most challenging enterprise environments. www.logrhythm.com SIeM 2.0 see what you’re missing

LogRhythm Siem 2.0 Flyer

Embed Size (px)

Citation preview

Page 1: LogRhythm Siem 2.0 Flyer

Setting a new standard in Security Information and Event Management (SIEM), LogRhythm eliminates many of the

architectural limitations and significant blind spots inherent in first generation products. Designed to address an ever-

changing landscape of threats and challenges, with a full suite of high-performance tools for compliance, security

and operations, LogRhythm delivers comprehensive, useful and actionable visibility into what is really going on in and

around an enterprise IT Environment. LogRhythm’s SIEM 2.0 platform delivers:

Fully Integrated Log & Event Management Distinct from legacy SIEM solutions, LogRhythm fully integrates traditionally separate log management and security event management

functions to collect, analyze and correlate log data – with a single console for operating and administering all components. Collecting

data from any source, LogRhythm’s SIEM 2.0 platform builds on an advanced data management structure with extensive data enrichment

to analyze all log data in real-time. Automated risk-based prioritization, powerful forensics, advanced visualization and alerting in a

simple-to-use GUI empowers organizations to gain unprecedented visibility and control over their enterprise IT environment.

Correlation That Works LogRhythm delivers advanced correlation and pattern recognition via a simple, drag and drop GUI, delivering

accessible functionality that is easily tailored to fit any environment. Extensive out-of-the-box rules combined

with a nearly limitless ability to easily create or modify rules for targeting specific behavior patterns or casting

a wider net, deliver comprehensive protection specific to your environment. LogRhythm performs real-time

analysis of all log data using TrueTime™ for accurate event sequencing and maximum precision. With a practical

combination of flexibility, usability and comprehensive data analysis, LogRhythm delivers real-time visibility to

risks, threats and critical operations issues that are otherwise undetectable in any practical way.

Robust Forensic Search and Drill-Down With wizard-based reports and investigations, fully interactive visualization tools with click-through drill-down, and

extensive data enrichment, LogRhythm displays powerful forensic capabilities through a single, universal console,

giving immediate access to the right data at the right time. Full integration allows forensic investigations to be easily

conducted directly from any alarm or event. Users can sort and filter on any combination of over 50 metadata fields,

with immediate access to all relevant log data and the surrounding context tied to any event.

Extended Visibility and Context LogRhythm delivers enterprise wide visibility from core systems to the endpoint – tying all event data to easily accessed and highly

relevant network, host and user-related context. Users can right-click for immediate access to host, network and user-related context,

perform extended event correlation or create detailed and/or summary reports. To fill any gaps in coverage, LogRhythm independently

monitors user and process activity, network connections, file integrity and data movement to removable media.

Easy to Use, Deploy and Scale A universal console with a highly intuitive, wizard-based toolset, automated reports and alerts, and a fully interactive, streamlined

interface makes learning and using LogRhythm easy. Centralized monitoring and management of all components through the same

interface and a self-maintaining database keep administrative overhead minimal. LogRhythm’s building block architecture, turnkey

software and hardware appliances and a highly flexible set of deployment options enable easy implementation and scalability to

meet the performance requirements of even the most challenging enterprise environments.

www.logrhythm.com

SIEM 2.0sEE what you’rE missing

Page 2: LogRhythm Siem 2.0 Flyer

“...with its combined coverage for real-time analysis, forensics and compliance monitoring being the

best we’ve seen.”

5-Starand distributed environments, and delivered with excellent

functionality, we give LogRhythm our

“Recommended” rating.”

“LogRhythm has

set the standardfor SIEM 2.0”

Top 100Technology Vendor

It enables us to be“LogRhythm is part of our systematic approach to security.

experts on ourown systems,

and network behavior, quickly idenitify anomolies

understand user

and take appropriate actions.”

“LogRhythm’s new capabilities help administrators

make the mostof their limited time

and hunt down and mitigate threats.”

can use it to be

more effective.”“Everyone in IT

www.logrhythm.com

© 2011 LogRhythm Inc.

“LogRhythm takes complicated functions

makes them easy.”like security information and event

management, brings them together and

“LogRhythm is an

outstanding andaffordable log management

tool, with many uses to fit any enterpriseIT management tasks, and particularly

useful in forensic analysis.”

“LogRhythm’s ability to

handle huge amounts of log data,provide granular analysis of user behavior and comprehensive

“out of the box” management reports...were all drivers to select LogRhythm.

with plenty of easy-to-use features,“Powerful product

this one is our

Best Buy.”

“We now have insights...we never had before.”

“Designed for large enterprise

SIEM 2.0 a nEw standard validatEd