Organizations are increasingly gathering security event data and logs for a broad range of uses; these provide an excellent starting point for effective security event management. IT and security staff need tools that are as sophisticated as those used by threat actors. Network defenders need accurate and rapid sorting, normalization and analysis across large sets of event information from multiple devices. this typical ""Big Data"" problem is complicated by the need for advanced real-time analysis during an event, as well as after the fact for remediation.
With these assumption as a foundation, SANS conducted a review of LogRhythm version 6.1. This functional review, conducted by senior SANS Analyst Dave Shackleford, shows LogRhythm's SIEM toolset capable of analyzing and reporting on security data in many different ways, with easy-to-use features. This release adds more complex analytics and analysis features, with additional attention given to behavioral whitelisting and analysis.
DatacenterDynamics is a brand of DCD Group, a global B2B media and publishing company that develops products to help senior professionals in the world's most ICT dependent organizations make risk-based infrastructure and capacity decisions.
Our portfolio of live events, online and print publishing, business intelligence and professional development brands are centred on the complexities of technology convergence. Operating in 42 different countries, we have developed a unique global knowledge and networking platform, which is trusted by over 30,000 ICT, engineering and technology professionals.
Data Centre Dynamics Ltd.
102-108 Clifton Street
London EC2A 4HW