Devo Analytics Platform Cloud-Native Logging, SIEM, Security Analytics & Aiops
Total Page：16
File Type：pdf, Size：1020Kb
Devo Analytics Platform Cloud-native logging, SIEM, security analytics & AIOps Key benefits Product overview • Get full visibility into all your data—400 days hot—for Devo unlocks the full value of machine data for the world's faster, more accurate threat most instrumented enterprises, putting more data to work investigations. now. The Devo Data Analytics Platform collects, enhances, • Embedded threat intelligence and analyzes machine, business, and operational data, at platform to enrich with threat scale, from across the enterprise. Devo delivers real-time context and guide analysts. insights for IT, security, and business operations teams from • Entity analytics point analysts analytics on both streaming and historical machine data. to anomalous behaviors, surfacing threats to your organization automatically. Product features • Complete incident response Bring together all security-relevant data for total visibility and investigation workflow Powered by the Devo Data Analytics Platform, Devo Security enables your team to respond Operations provides the scale and performance required for petabyte- rapidly. scale data ingestion and analysis. SOCs can centralize data from any • Devo is a true cloud-native source, time horizon, or environment in a single location, eliminating solution for businesses that the inefficiency of multiple data siloes and tools. already operate in the cloud or are making the shift to the cloud. Improve signal-to-noise ratio • Automated Devo enrichments The high-signal alerts in Devo reduce mean time to repair (MTTR) by inform your security focusing analysts on the alerts that matter most. Devo includes operations center (SOC) hundreds of pre-built alerts and supports custom alerts. analysts, enabling them to streamline their triage, investigation, and hunting Simplify and accelerate investigations workflows. Devo automatically pre-populates alerts and investigations with actionable, real-time data and context including threat data, priority scoring, MITRE Adversarial Tactics, Techniques, and Common Knowledge (MITRE ATT&CK) labels, custom SOC taxonomy, entity Additional Resources impact, and more. Devo Data Sizing Tool • Consume threat data and share findings quickly • Evaluation Toolkit The Threat Data Service leverages the Devo Malware Information Sharing Platform (MISP) infrastructure to enrich alerts and • Devo Support and investigations with attributes and indicators in any format. Users can Training choose to privately share indicators, sightings and events with other Devo users, organizations, or the broader MISP community. • Devo FAQ 1 How it works Devo has engineered a solution to empower enterprise security teams and provide them the ability to view their entire attack surface. The Devo Platform, combined with the Devo Security Operations application, provides advanced analytics for SOC teams to detect, investigate, and hunt for attacks in real-time— 24/7/365—enabling a robust defense against all cybersecurity threats that modern enterprises face. And, with alert categorizations from Devo mapped to the specific tactics, techniques, and procedures (TTPs) found in the MITRE ATT&CK framework, analysts can act quickly to respond to the most critical techniques being triggered. Differentiators • Handles terabytes of ingest volume while analyzing petabytes of data • Delivers insights from log and metric data, providing business, security, and operations teams with no- code visual analytics • No-compromise architecture that delivers both scale and speed at lower costs 2 Solution available in AWS Marketplace 3.