THANK YOU FOR SUBSCRIBING
Enterprise Security Magazine | Tuesday, November 17, 2020
The MITRE ATT&CK visualization application in LogPoint 6.9 assists analysts in tracking the phases of an intervention and see ATT&CK observations in the system.
FREMONT, CA: The modern Security Information and Event Management (SIEM) and User Behavior Analytics (UEBA) company, LogPoint has launched version 6.9 of its SIEM solution. The newest LogPoint release presents several new competent tools to gear up the investigation of cybersecurity events in the LogPoint SIEM tool.
“With LogPoint 6.9 you can connect the dots of cyberattacks with new-fangled MITRE ATT&CK visualizations. This feature will drill-down more efficiently during an investigation and streamline incident creation based on irregularities found by UEBA. It is a release envisioned to improve the lives of the cybersecurity specialists working relentlessly to keep companies and organizations safe, “says Alec Orlov, Head of Product Management, LogPoint.
Stay ahead of the industry with exclusive feature stories on the top companies, expert insights and the latest news delivered straight to your inbox. Subscribe today.
The MITRE ATT&CK visualization application in LogPoint 6.9 assists analysts in tracking the phases of an intervention and see ATT&CK observations in the system. When an incident is caused, it is emphasized in a heat map, enabling the experts to piece together different occurrences and know what to examine. Furthermore, users can choose any approach and see all associated alerts, serving to evaluate security coverage.
“A simple, yet effective feature in the new release is the ability to carry key-value pairs from search as input parameters to search templates. When analysts want to drill forward from logs to search templates, they can select relevant points, and the system will forward the user to the relevant search template. This is useful in incident investigation and helps analysts pivot from something in search to find out what else is going on,” adds Orlov.
In LogPoint UEBA, experts can save time by merely clicking on an irregularity to create an incident. The anomaly is stored in LogPoint, and experts can allocate it to another user for further examination. Manually creating an experience matches the existing automatic incident creation in UEBA, where operators can tune the alert depending on inclusion, exclusion, and risk threshold.
More in News