LogRhythm SIEM is a self-hosted Security Information and Event Management platform designed to detect and remediate security incidents. The system offers: 1. Log collection and centralized management from various sources 2. Threat detection using analytics and threat intelligence 3. Incident response workflow for investigation and remediation 4. Visualization tools including dashboards and timelines 5. Machine Data Intelligence (MDI) Fabric for data contextualization and enrichment 6. Built-in case management and playbooks 7. Embedded security orchestration, automation and response (SOAR) capabilities 8. Scalability to accommodate growing environments LogRhythm SIEM aims to provide visibility across an organization's IT environment, from endpoints to networks and cloud infrastructure, to help security teams identify and respond to threats efficiently.
FEATURES
ALTERNATIVES
DataCop is a custom AWS framework for mitigating S3 bucket attack vectors based on customer configuration.
Export Kubernetes events for observability and alerting purposes with flexible routing options.
Open-source policy-as-code software for multi-cloud and SaaS environments with GPT model conversations and custom analysis policies.
Burp extension for identifying cloud buckets and testing for vulnerabilities
Weave Scope automatically generates a map of your application for troubleshooting and monitoring Docker & Kubernetes.
A cloud security platform that combines Kubernetes security scanning, runtime monitoring, and cloud security posture management using Kubescape and eBPF technology.
A search engine for open Amazon S3 buckets and their contents, allowing users to search for files using keywords, filename extensions, and full path.
Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
RoboShadow
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.