- Applies detection logic to behavior modeling with UEBA
- Cloud SOAR features added to Cloud SIEM power new Automation Service
- ML-powered detection lowers false positives with Cloud SIEM Insight Trainer; introduces integration of ChatGPT to accelerate security investigations
“Siloed tools and teams are a major barrier to scaling security operations and addressing the dynamic threat landscape of cloud-developed applications,” said
Acknowledges one early adopter, “Sumo Logic gives us the opportunity to accelerate and expand growth and adoption of behavioral analytics across our organization. With the number of potential unknown threats to investigate, it is easier for us to make confident, data-driven decisions quickly,” said
Here are the new benefits:
- Native UEBA Threat Detection for Greater Transparency, Increased Flexibility: Previous generations of UEBA anomaly detection have been plagued by problems with false positives, complexity and tuning limitations. Sumo Logic Cloud SIEM addresses these challenges with new UEBA capabilities delivering transparent, configurable, tunable detection and base-lining -- fully integrated with all other detection tools. With this distinct advantage,
Sumo Logic preserves the benefits of identifying unknown threats, insider threats, and user/entity profiling without the drawbacks of previous industry UEBA solutions. Extending its heritage as a leader in log analytics,Sumo Logic takes UEBA one step further to address new classes of use cases in application security and observability. - Efficient Automation and Enrichment from Cloud SOAR: Current SIEM offerings have difficulty contextualizing real threats and security analysts must pivot to other tools -- threat intelligence, DDOS, malware, lateral movement or phishing, and a plethora of other enrichment capabilities -- to deal with the huge volume and wide variety of alerts generated. Delivering automation at cloud scale,
Sumo Logic introduces Cloud SIEM Automation Service, a marriage of Cloud SOAR with Cloud SIEM. Today, security analysts can more efficiently automate the data from alerts, telemetry and enrichment. - ML-Powered Detection & Investigation: Built to help security engineers and security analysts tune threat detection logic to minimize false positives and boost true positives,
Sumo Logic introduces Cloud SIEM Insight Trainer. Insight Trainer applies ML to understand patterns in the data and automatically suggests detection logic severity and tuning adjustments. When recommendations are applied on a regular basis, Sumo Logic Cloud SIEM enables SOC teams to focus attention on true indicators of compromise. As a result, overall security posture is improved with high-fidelity signals. To accelerate security investigations,Sumo Logic introduces its integration of ChatGPT with its powerful automation and orchestration solution, Cloud SOAR. With this integration, security analysts can quickly identify best practices within documented incident management framework with SOAR investigation workflows.
With these additions,
More Reading:
Solution Brief: Sumo Logic Cloud SIEM
Blog: How using Cloud SIEM dashboards and metrics for daily standups improves SOC efficiency
Blog: ChatGPT praise and trepidation - cyber defense in the age of AI
About
Any information regarding offerings, updates, functionality, or other modifications, including release dates, is subject to change without notice. The development, release, and timing of any offering, update, functionality, or modification described herein remains at the sole discretion of
Media Contacts
charris@sumologic.com
SumoLogicPR@RHStrategic.com
Photos accompanying this announcement are available at:
https://www.globenewswire.com/NewsRoom/AttachmentNg/92757e6f-0dbf-4dce-9ebc-5d3672886e1b
https://www.globenewswire.com/NewsRoom/AttachmentNg/e1bde8b0-68b1-4513-8cf6-be680eee647d
Sumo Logic Cloud SIEM Automation Service
Sumo Logic introduces Cloud SIEM Automation Service, a marriage of Cloud SOAR with Cloud SIEM.
Sumo Logic Cloud SIEM Insight Trainer
Sumo Logic Cloud SIEM enables SOC teams to focus attention on true indicators of compromise. As a result, overall security posture is improved with high-fidelity signals.
2023 GlobeNewswire, Inc., source