On January 05, 2023, LogRhythm, the company that empowers security teams to tackle an ever-changing threat landscape with confidence, introduced a variety of expanded capabilities and integrations for its security operations solutions. The enhancements improve LogRhythm's capacity to serve as a much-needed force multiplier for security teams that are required to defend against cyberattacks with confidence, effectiveness, and efficiency.
This update follows the release of LogRhythm Axon, an innovative, cloud-native security operations platform launched in October. In addition, the organization is launching new visualizations and advanced analytics that provide seamless visibility into potential security threats.
Axon and its latest updates are designed to simplify the experience of security analysts by making it easier for teams to identify, examine, and report on potential threats, easing the burden of managing risks and the operating infrastructure. In addition, these improvements span the entire suite of LogRhythm's offerings to collectively facilitate threat detection and resolution by SOC teams, improving analyst productivity and effectiveness.
The key features of the updates include the following:
LogRhythm Axon:
-
New out-of-the-box and custom analytics rules that have rules for MITRE ATT&CK detections.
-
Using the Observation Workflow, customers can quickly investigate log observations raised by analytics.
-
Reduce time spent searching for data through new markdown and histogram widgets.
LogRhythm UEBA:
-
New detection models allow for the detection of elusive threats for Windows systems.
LogRhythm NDR:
-
Integration with Microsoft EDR improves blind spot detection and endpoint visibility.
-
Enhanced analyst experience through expanded UI improvements.
-
The new configuration page enables to import of data from VirusTotal smoothly.
LogRhythm SIEM:
-
The improved collection administrative workflow reduces the time required to configure, deploy, and manage log sources that involve Open Collector.
-
Expanded and updated LogRhythm's library of supported log sources.
-
Improved audit logging makes it easier to detect suspicious activity and track significant changes made by users.
About LogRhythm
LogRhythm, Inc. is an American security intelligence firm founded in 2003 that specializes in SIEM, log management, network and endpoint monitoring, forensics, and security analytics. With a comprehensive array of high-performance security, compliance, and operations solutions, LogRhythm is built to address a rapidly evolving world of cybersecurity threats. In addition, LogRhythm combines a versatile and comprehensive security operations platform, advisory services, and technology partnerships to help SOC teams defend sensitive data.