Pure Power. Serious Simplicity.
Here’s a security solution that isn’t as complex as the problem. Sentinel® is a full-featured Security Information and Event Management (SIEM) solution that simplifies the deployment, management and day-to-day use of SIEM, readily adapts to dynamic enterprise environments and delivers the true “actionable intelligence” security professionals need to quickly understand their threat posture and prioritize response.
- The information you need at your fingertips
Government and internal audit policies mandate the need to collect, retain, and report against log data—but with so much information in so many different systems and formats, finding the information you need requires powerful ease of use.
- Detects new threats quickly and easily
Sentinel ships with packaged intelligence to detect many threats out-of-the-box without time consuming rule-writing and configuration. Built-in anomaly detection automatically detects changes that can represent emerging threats. An optional scalable storage backend uses the Cloudera/Hadoop infrastructure to enhance data mining capabilities using industry-standard analytic tool sets.
- Greater visibility into user activities
Understanding the “who, what, when, and where” of user system access is essential for controlling insider-based risks. Sentinel integrates security data with unique user identity information to help teams quickly identify risky access behaviors. A critical threat information landing page reduces time needed to respond to all threats, especially those resulting from insiders.
- Only need log management?
Sentinel Log Manager enables the collection, storage, analysis and management of IT infrastructure event and security logs, providing flexible and cost-efficient log management for mitigating risk and addressing compliance reporting needs.