Can network detection feed alerts into our existing SIEM?

Yes, most network detection tools can, and it is usually better than sending raw network logs. A SIEMSIEM: security information and event management. A system that collects logs from many systems and looks for patterns across them. (security information and event management) that receives explained network alerts gains a view it otherwise lacks, without the storage cost and noise of every connection record. Before connecting, decide which alert levels should go to the SIEM, who reads them there, and how the two tools share a host name or address so that alerts can be matched with log events. With NetSenX, SIEM export is included from the Business plan. On the Pro plan, alerts can also leave through the API, Slack or a webhook, and on every plan they are sent by e-mail and kept in the dashboard for the alert history of your plan. Exporting does not change what NetSenX sees: it remains network behaviour, never the content of encrypted sessions.

← All 40 questions on NDR, EDR, SIEM, XDR, MDRAll topics