RSA Security Analytics
Protect your organization’s valuable digital assets with RSA Security Analytics. RSA Security Analytics lets security operations teams collect and analyze logs, network packets, NetFlow, and endpoint data. These capabilities enable SOC analysts to discover attacks that traditional log-centric security information and event management SIEM tools miss.
At the time of collection, RSA Security Analytics uses Capture Time Data Enrichment to inspect every piece of data collected for threat indicators. Analysts have the ability to investigate rapidly down to the most granular detail. Your team can understand exactly what is happening and what to do about it.
Deploy the full RSA Security Analytics product or choose what you need to complement tools that your security operations team already uses. Use cases include:
- SIEM: log and NetFlow collection, correlation, archiving, incident management, compliance and security reporting
- Network forensics and monitoring: full packet capture, correlation, Big Data analytics, deep dive investigations, incident management and response
Key Features:
- Gain visibility and correlate across logs, networks, and endpoints
- Investigate threats in minutes instead of hours or days
- Use Big Data analytics to detect and analyze even the most advanced attacks before they affect the business
- Focus on the most important events with prioritized incident management
- Streamline security analyst workflows with one tool
- Take advantage of a flexible, modular approach