Logpoint SIEM is a security information and event management solution that centralizes log and event data collection from various sources across an organization's infrastructure. The platform normalizes collected data into a common taxonomy, making it easier for security analysts to work with logs from different systems without needing to know the exact format of each device's logs. The solution maps alerts to the MITRE ATT&CK framework to provide context for security incidents and user activity. It includes data enrichment capabilities that add contextual information such as threat intelligence, geographical data, and LDAP information to logs. Logpoint SIEM offers compliance support for regulatory frameworks including GDPR, NIS2, and GPG13 through pre-configured dashboards for access management, incident management, and perimeter security monitoring. The platform includes forensic analysis capabilities to help determine the root cause of security breaches. The solution features AgentX, a native endpoint sensor that provides visibility into user actions and processes running on endpoints to enhance threat detection capabilities. Logpoint SIEM can be integrated with other security tools within the Logpoint ecosystem, including automation, case management, and behavior analytics components. Logpoint SIEM supports various deployment options and is designed to help organizations improve their security visibility, threat detection, and compliance reporting capabilities.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Windows Event Log Analyzer with logon timeline generator and noise reduction for fast forensics.
Procmon for Linux is a reimagining of the classic Procmon tool from Windows, allowing Linux developers to trace syscall activity efficiently.
AlienVault OSSIM provides an all-in-one security management solution with asset discovery, vulnerability assessment, and SIEM capabilities.
A dynamic GUI for advanced log analysis, allowing users to execute SQL queries on structured log data.
Serverless, real-time data analysis framework for incident detection and response.
Sysmon for Linux is a tool that monitors and logs system activity with advanced filtering to identify malicious activity.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.