Products
Features
Infraskope SIEM Server is an all-in-one solution for log management and SIEM needs. It's collector framework helps you collect any kind of log entry from various applications, operating systems, network devices, database and messaging systems, etc. Infraskope SIEM Agent is a specialized log collector that can forward critical events to Infraskope SIEM Server. In addition to standard log forwarding, it can also detect suspicous activities such as password-bypass attempts (via KonBoot, KALI, ERDCommander etc.), keyboard simulation attacks (USB Rubber Ducky, Teensy, etc.), external storage devices, 3G modem and mobile phone tethering activities, ARP spoofing, promiscious mode NICs, MAC address changes and more. With the help of AppTracker module, it can precisely measure software usage (software metering).
Description
Infraskope SIEM Server is an all-in-one solution for log management and SIEM needs. It's collector framework helps you collect any kind of log entry from various applications, operating systems, network devices, database and messaging systems, etc. Infraskope SIEM Agent is a specialized log collector that can forward critical events to Infraskope SIEM Server. In addition to standard log forwarding, it can also detect suspicous activities such as password-bypass attempts (via KonBoot, KALI, ERDCommander etc.), keyboard simulation attacks (USB Rubber Ducky, Teensy, etc.), external storage devices, 3G modem and mobile phone tethering activities, ARP spoofing, promiscious mode NICs, MAC address changes and more. With the help of AppTracker module, it can precisely measure software usage (software metering).