SIEM Plan

Energy Logserver, through its built-in vulnerability detection module and the use of best practices defined in the CIS, allows to audit monitored environment for security vulnerabilities, misconfigurations, or outdated software versions. File Integrity Monitoring functionality allows for detailed monitoring and alerting of unauthorized access attempts to the most sensitive data.

The module provides functionalities supporting assessment for the risk of incident occurrence and its impact on the organization. The system offers full management of the incident handling process in the team, including assignment of relevant playbooks, and, on the other hand, enables simple integration with SOAR systems.

Finally, SIEM Plan is a solution that provides a ready-made set of tools for compliance regulations such as CIS, PCI DSS, GDPR, NIST 800-53, ISO 27001. The system enables the mapping of detected threats to MITRE ATT&CK tactics. By integrating with the MISP Energy Logserver, allows getting real-time information about new threats on the network by downloading the latest IoC lists.

MAIN FEATURES

• MISP
  Regular updates from our repository or local MISP instance
• MITRE ATT&CK
  Easy assign
• DASHBOARDS
  Clear view on incidents
• PREDEFINED CORRELATION RULES
  Ready to use or modify
• COMPLIANCE REPORTS
  Precise information about your data
• INCIDENT MANAGEMENT
  Solve issues quickly in the team
• VULNERABILITY MANAGEMENT
  Fix vulnerabilities before others find them
• RISK MANAGEMENT
  Take care of your most important resources