Exabeam Security Operations PlatformExabeam Security Operations Platform Administration Guide

Exabeam Security Log Management is the industry’s most advanced cloud-native solution for log ingestion, parsing, storage, and search. Built to support security use cases, Exabeam Security Log Management is the entry point for your organization, providing a lightning fast, modern search and dashboard experience across multi-year data.

Exabeam SIEM extends the cloud-scale capabilities of Exabeam Security Log Management with advanced features for threat detection, investigation and response (TDIR). In addition to its massively scalable ingestion, storage and intelligent search capabilities across petabytes of hot, warm, or cold data in seconds, Exabeam SIEM includes Threat Center and 100s of pre-packaged correlations. If more storage, longer storage time, or additional processing power is needed, Exabeam SIEM easily scales to meet your needs.

Exabeam Fusion is a comprehensive offering that marries SIEM and security investigation capabilities with advanced threat detection. With Exabeam Fusion, user and entity behavior analytics feed into your automated incident triage, investigation, and response workflows.

Similar to Exabeam Security Analytics, Exabeam Security Investigation augments a SIEM or data lake solution with the industry’s most powerful UEBA and automation and adds additional investigation capabilities. Exabeam Security Investigation provides over 1,900 UEBA rules and behavioral models to automatically baseline normal behavior of users and devices with histograms to detect, prioritize and respond to anomalies based on risk as well as prioritizes third party alerts using machine learning.

Exabeam Security Analytics enables organizations to quickly perform threat detection and analysis on existing data streams and data lake/repositories with built-in log ingestion and parsing. Threat detection is powered by user and behavioral entity analytics, correlation rules, and threat intelligence, and augmented by alerting and case/incident management.