McAfee Launches ESM Cloud, Delivering Rapid Time to Value With Incident Investigations
McAfee, the device-to-cloud cybersecurity company, announced McAfee Enterprise Security Manager (ESM) Cloud, a new cloud-based security and information event management (SIEM) offering that supports the detection, incident response and threat hunting activities of a security operations team. As a cloud-based solution, McAfee ESM Cloud extends the value of a traditional SIEM by providing faster onboarding of security telemetry, automatic updates and continuous system health monitoring.
Recommended AI News: Zendesk Releases CX Benchmark Report For Startups Showing The Path To Success Is In CX
“Today’s SecOps teams face a multitude of issues, including the need to take on new efforts such as digital transformation, the convergence of internet technology and operation technology, and the sudden shift to remote working,” said Anand Ramanathan, vice president of enterprise products, McAfee. “ESM Cloud helps customers tackle these challenges, allowing them to maintain and improve upon their security posture as they progress through their journey of transitioning to the cloud.”
Recommended AI News: Skydio Introduces The New X2 Family Of Drones And Breakthrough Autonomy Software
McAfee ESM Cloud leverages the power of cloud computing to accelerate time to value for security operations centers through:
- Advanced Analytics: real-time and historical analysis powered by rich contextual data to detect and prioritize threats, uncover anomalous user behavior and respond to attacker tactics, techniques and procedures (TTPs)
- Time to Value: use case focused security content packs that deliver immediate value through pre-built threat detection rules and fully operational dashboards, reports, watchlists and alarms
- Unmatched Data Source Coverage: out-of-the-box coverage of 100’s of data sources across the endpoint, network and cloud-based services and applications
- Open Integration Fabric: open interface facilitates integration with McAfee and third-party solutions for immediate response to threats
- Simplicity and Operational Efficiency: auto-provisioning allows event ingestion from day one and improves efficacy by minimizing engineering efforts required to deploy and maintain infrastructure
- Continuous Improvement: new capabilities and enhancements delivered automatically, freeing customers from the burden of software updates and upgrades
- Scalability and Elasticity: cloud-based service supports dynamically changing customer requirements, automatically increasing scale and capacity to process vast amounts of data
Recommended AI News: AutomotiveMastermind Hires & Promotes New Executives To Strengthen Leadership Team
Comments are closed, but trackbacks and pingbacks are open.