Knowledgebase: SOCaaS

SOC as a Service
cyber security at your service

A complete service for the safety of your company:

  • Data collection and enrichment (SDL)
  • Event and Information Management (SIEM)
  • User Behavior Analysis (UEBA)
Back

Articles under SOCaaS

Are connectors software agents that are installed on devices?
How does the updating of agents work, is it managed centrally from the console or must it be done promptly on the devices?
Is it possible to issue commands from the Securonix console to the monitored devices, such as those needed to run playboks, using the connectors?
Is the communication between the devices and the SIEM console point-to-point encrypted or does it go through a VPN gateway that needs to be installed?
For customers who already have a Log Management solution, can it be integrated into the solution to avoid installing the agents again?
Are the connectors only used to monitor the infrastructure (server, firewall, IPS, etc) or also for the end points?
Does the connector format provide for mass software distribution (eg MSI package)?
Could there be contexts where it is not possible to monitor the customer infrastructure?
What do connectors send, just logs or other data?

Products
Partners
News
Contatti