ManageEngine Log360
Log360 is a SIEM or security analytics solution that helps you combat threats on premises, in the cloud, or in a hybrid environment. It also helps organizations adhere to compliance mandates such as PCI DSS, HIPAA, GDPR and more. You can customize the solution to cater to your unique use cases and protect your sensitive data.
With Log360, you can monitor and audit activities that occur in your Active Directory, network devices, employee workstations, file servers, databases, Microsoft 365 environment, cloud services and more. Log360 correlates log data from different devices to detect complex attack patterns and advanced persistent threats. The solution also comes with a machine learning based behavioral analytics that detects user and entity behavior anomalies, and couples them with a risk score. The security analytics are presented in the form of more than 1000 pre-defined, actionable reports. Log forensics can be performed to get to the root cause of a security challenge.
The built-in incident management system allows you to automate the remediation response with intelligent workflows and integrations with popular ticketing tools.
Learn more
Criminal IP
Criminal IP is a cyber threat intelligence search engine that detects vulnerabilities in personal and corporate cyber assets in real time and allows users to take preemptive actions. Coming from the idea that individuals and businesses would be able to boost their cyber security by obtaining information about accessing IP addresses in advance, Criminal IP's extensive data of over 4.2 billion IP addresses and counting to provide threat-relevant information about malicious IP addresses, malicious links, phishing websites, certificates, industrial control systems, IoTs, servers, CCTVs, etc.
Using Criminal IP’s four key features (Asset Search, Domain Search, Exploit Search, and Image Search), you can search for IP risk scores and vulnerabilities related to searched IP addresses and domains, vulnerabilities for each service, and assets that are open to cyber attacks in image forms, in respective order.
Learn more
Kroll Cyber Risk
We are the #1 incident response provider in the world. We protect, detect, and respond to cyberattacks by combining complete response capabilities and frontline threat information from over 3000 incidents per year with end-to-end expertise. Contact us immediately via our 24-hour cyber incident hotlines.
Kroll's Cyber Risk specialists can help you tackle the threats of today and tomorrow. Kroll's protection solutions, detection and response are enriched with frontline threat intelligence from 3000+ incident cases each year.
It is important to take proactive measures to protect your organization, as the attack surface is constantly increasing in scope and complexity. Enter Kroll's Threat Lifecycle Management. Our end-to-end solutions for cyber risk help uncover vulnerabilities, validate the effectiveness your defenses, update controls, fine-tune detectors and confidently respond any threat.
Learn more
AT&T Alien Labs Open Threat Exchange
The largest open threat intelligence community in the world fosters a collaborative defense through actionable threat data powered by its members. In the realm of cybersecurity, threat sharing often remains disorganized and casual, leading to significant gaps and challenges in response efforts. Our goal is to facilitate the rapid collection and dissemination of relevant, timely, and accurate information regarding new or ongoing cyber threats among companies and government entities, helping to avert major breaches or reduce the impact of attacks. The Alien Labs Open Threat Exchange (OTX™) transforms this ambition into reality by offering the first truly accessible threat intelligence community. OTX grants open access to a worldwide network of security professionals and threat researchers, boasting over 100,000 contributors from 140 nations who provide more than 19 million threat indicators each day. By delivering data generated by the community, OTX promotes collaborative investigations and streamlines the updating of security systems, ensuring that organizations remain resilient against evolving threats. This community-driven approach not only enhances collective knowledge but also strengthens overall cyber defense capabilities across the globe.
Learn more