Overall Satisfaction with AlienVault USM
AlienVault is our SIEM tool that addresses the enterprise looking for indications of compromise. This was a finding in an internal audit a few years ago so it follows more of a compliance requirement.
- Active Directory login requests
- Logs on the Domain Controls
- Only showing alerts that have a high indication of compromise and reduces false positives.
- Trimming of log files to stay within limits
- Projecting any future storage costs from AlienVault
AlienVault was much less expensive with less effort to install and manage.