COMPANY SUPPORT Join Us Request a Quote TRIAL Contact Us
FREE TRIAL

SIEM

 

SECNOLOGY combines SIM & SEM to offer a truly unique SIEM solution. It provides real time or on demand analysis of security alerts generated by network & security hardware and applications. The segment of security management that deals with real-time monitoring, correlation of events, notifications and console views is commonly known as security event management (SEM). The second area provides long-term storage as well as analysis and reporting of log data, and is known as security information management (SIM). As with many meanings and definitions of capabilities, evolving requirements continually shape derivatives of SIEM product-categories. With SECNOLOGY no need to turn to big data platforms, such as Hadoop, to complement SIEM capabilities by extending data storage capacity and analytic flexibility:

The product capabilities of gathering, analyzing and presenting information from network and security devices.

Identity and access-management applications

Vulnerability management and policy-compliance tools

Operating-system, database and application logs

External threat data

The key focus is to monitor and help manage user and service privileges, directory services and other system-configuration changes; as well as providing log auditing and review and incident response.

SIEM SECNOLOGY visual presentation

What are the SECNOLOGY’s Capabilities for SIEM ?

AGGREGATION

SECnology SIEM agregation

SECNOLOGY aggregates data from many sources, including network, security, servers, databases, applications, providing the ability to consolidate monitored data to help avoid missing crucial events.

CORRELATION

SECnology SIEM correlation visual

looks for common attributes, and links events together into meaningful bundles. This technology provides the ability to perform a variety of correlation techniques to integrate different sources, in order to turn data into useful information.

ALERTING

SECnology SIEM Alerting visual

the automated analysis of correlated events and production of alerts, to notify recipients of immediate issues. Alerting can be done in many different ways (dashboard, email, pop-up….)

DASHBOARDS & REPORTS

SECnology SIEM Dashboard visual

SECNOLOGY takes event data and turns it into informational charts to assist in seeing graphical patterns, or identifying nonstandard activity.

COMPLIANCE

SECnology SIEM compliance

With SECNOLOGY automate the gathering of compliance data, producing reports that adapt to existing security, governance and auditing processes.

DATA LIFECYCLE MANAGEMENT

SECnology SIEM Data Life cycle

Manage long-term storage of historical data to facilitate correlation of data over time, and to provide the retention necessary for compliance requirements. Long term log data retention is critical in forensic investigations as network breaches are rarely discovers at the time they occur.

FORENSIC ANALYSIS

SECnology SIEM Forensic analysis

The ability to search across logs on different nodes and time periods based on specific criteria. This mitigates having to aggregate log information or having to search through thousands and thousands of logs.

SECNOLOGY log management

Log Management

 

Log management concerns are about security, system and network operations (such as system or network administration) and regulatory compliance.

Effectively analyzing large volumes of diverse logs can pose many challenges with most Log Managers but not with SECNOLOGY:

  • Volume: log data can reach hundreds of gigabytes of data per day for a large organization. Simply collecting, centralizing and storing data in this volume can be challenging. SECNOLOGY’s patented STIM architecture ensures near unlimited log treatment.
  • Normalization: logs are produced in multiple formats. Most log managers use a database scheme which can lead to data loss incompatible with regulatory compliance. SECNOLOGY uses a unique flat file system which ensures data integrity.

With SECNOLOGY you get more, you also get what you were not looking for. IT security experts know that the most dangerous events are not the ones that occur millions of times, but those that happen occasionally without detection

Log Analysis

 

In the initial stages, organizations generate different logs for analyzing the logs in the devices on the security-perimeter. They aim to identify the patterns of attack on the perimeter infrastructure of the organization.

  • With increased use of integrated computing, organizations mandate logs to identify the access and use of confidential data within the security-perimeter.
  • With SECNOLOGY, track and monitor the performance and availability of entreprise systems & merge the physical-access monitoring and the logical-access monitoring into a single view.
SECNOLOGY SIEM Log management

What are SECNOLOGY’s Capabilities for Log Management ?

Logging can produce technical information used for the maintenance of applications or websites. It can serve to define whether a reported issue is actually an issue and to help analyze, reproduce and solve them.

Collection

We collect on at least a dozen protocols

Parsing

No regex or SDK needed. We have the only graphical parser on the market. Point and click.

Correlation

We correlate and on many levels.

Architecture

We have the only Grid-Computing architecture. No bottlenecks

Performance

We can process as much as the data requires…at no additional cost !

We strongly focus on the feature, ease of use, power and simplicity of our secnology’s solution to help you effectively secure your information system.

We guarantee a quality customer service dedicated to your ultimate satisfaction.

CASE STUDIES