Logpoint is announcing the release of new capabilities to its Converged SIEM platform, built on SIEM, SOAR, UEBA, and Business-Critical Security (BCS) technologies.
The new SOC-centred functions connect detection with investigation, automation, response, and orchestration to provide enhanced visibility, automation, and response and improve the end-to-end functionality for end customers and MSSP partners.
Edy Almer, Logpoint Director of Product said, “cyberattacks have become a daily nuisance for organisations today, and improving the security posture is a top priority. We’re now enhancing endpoint capabilities and strengthening our case management tool to help analysts better understand what’s happening. Gaining that complete insight makes it easier to identify security breaches, simplifies investigation, and accelerates response, allowing small organisations to handle attacks and leverage MSSP capabilities to save time and resources. The SOC team can also share information more easily with the rest of the organisation, helping CISOs justify their cybersecurity approach or build a case to modify it.”
The new release improves investigation by introducing more contextual information in Logpoint SOAR. Security analysts will have all the information they need in the case management tool, with incidents mapped to the MITRE ATT&CK framework and a new graphical overview of connections between artifacts.
Logpoint has also introduced case summaries, providing analysts with a PDF report on ongoing and finalised cases to share with stakeholders, and the playbooks are enhanced with improved documentation and increased flexibility to create more precise and less time-consuming workflows.
The capabilities in AgentX, Logpoint’s native endpoint agent, have also been expanded, with the opportunity to select the installation directory and manage the TLS authentication directly from the user interface. In addition, SOAR now automatically authenticates AgentX, saving time and preventing mistakes from happening from manual authentications.
Logpoint Converged SIEM is an end-to-end cybersecurity platform that covers the entire threat detection and incident response (TDIR) process. The platform automatically adds threat intelligence, business context, and entity risk to observations to transform weak signals into meaningful investigations and enables analysts to respond faster with automation and orchestration.
