I could see every endpoint event like Registry modifications , User Logons, File modifications , Dns Requests but i am looking for a way to get the Firewall logs.
One of the biggest challenges I as an administrator have had is removing CS sensor from hosts that I no longer need to monitor. Please let know if there is an effective way to do it.
hello All,
Firstly please help me to understand if solarwind Threat monitor and Security Event manager are same or different...
Actually.. i have a scenario. where we have around 20 branch offices..and running via MPLS ..all sites are interconnected with each other..we want to monitor , identify... Read more
I know that there is a free trial version for new customers, but do you guys think you will have a free version that people can use while accessing the wifi in public areas like Starbucks.
We are currently using SS for Third Party & Supplier Risk Management
How can we use other functionality of SS
IT Portfolio Analysis
IT Risk Management
Security Risk Analysis
Threat Intelligence
Personally, the tool has solved the problem for which we initially hired it, and little by little we have stopped using it (each time we review it less), I consider it a great tool and we could take advantage of better use if we know the benefits to different problems and how to implement it... Read more
Interface: SIRP has a user-friendly interface with customizable dashboards and widgets. SIRP provides multiple dashboards for users to manage incidents, vulnerabilities, risks, and threat advisories which can be customized for smoothly maintaining and managing relevant processes.
Integrations: SIRP integrates seamlessly with multiple security products and applications from many well-known vendors including IBM, RSA, Tenable, Microsoft, Amazon AWS and Splunk etc.
Features: SIRP offers many modules that together orchestrate and automate your key cyber security processes. It lets you organize incidents in the form of cases and have a follow-up for each case. It also provides a threat intelligence module for a proactive approach against latest cyber... Read more
Costing: The cost of SIRP may vary from customer to customer depending on the modules and the support tier they demand. However, our pricing is highly competitive.
SIRP Functionalities: SIRP is a Security Orchestration, Automation and Response (SOAR) Platform which lets you organize all your cybersecurity incidents, vulnerable assets, risks and threats in a single platform and automates redundant processes to enable you for security orchestration.
Onboarding Duration: Normally, SIRP is deployed and setup within 2 days. After that our team works with the customer to understand their environment, processes and security controls. We attempt to automate their basic functions and processes and try to mature it over time.
Support: Yes, our team provides ongoing support from deployment to implementation and post-implementation. Our team is also readily available for support whenever new integrations are needed.
Typical Usage: Organizations use SIRP to automate and orchestrate their key security processes. They use combination of modules (Asset Management, Incident Management, Vulnerability Management, Threat Intelligence and Risk Management) to bring together their people, processes and technologies.