Overall Satisfaction with AlienVault Unified Security Management
AlienVault Unified Security Management is being used by the information security department of our company. It is helping us to quickly identify security incidents and to investigate and respond in a timely manner.
- Correlates events from different sources and displays comprehensive information about security incidents.
- The threat intelligence database is constantly updated with information about new threats and indicators of compromise.
- The network asset detection function is helping us to always be aware what systems are connected to our network.
- The alarms interface is very easy to navigate and is following the cyber kill chain model. This makes it very easy to prioritize the incident response efforts to the most critical alarms.
- More plugins for anti-virus product logs like Kaspersky.
AlienVault USM had more features than any other SIEM product that we evaluated during the selection process. The price was also very good. It is very easy to set-up and run immediately out of the box.