What’s New in Exabeam Product Development — January 2024
Key Highlights from Exabeam’s January Updates
Exabeam’s latest updates bring a wide array of features designed to optimize the efficiency and accuracy of security operations:
- Unordered event detection for better threat detection flexibility
- Enhanced SOC visualization with a pre-built SOC Overview Dashboard
- Accelerated onboarding using OVA VM kickstarter
- Improved Azure log collection through new Cloud Collectors
Flexible Threat Detection with Unordered Event Rules
Traditional rule chaining requires events to occur in a specific sequence, limiting flexibility in detecting sophisticated attack patterns. Exabeam now supports unordered event detection, allowing security teams to create correlation rules without requiring event order.
Benefits of Unordered Event Detection:
- Simplifies rule creation by eliminating redundant ordered rules.
- Enhances flexibility to detect non-linear attack patterns.
- Improves time efficiency for detection engineers.
Improved SOC Oversight with Pre-Built Dashboard
The new SOC Overview Dashboard provides SOC administrators and managers with comprehensive insights into their organization’s security posture. Featuring pre-built visualizations, this dashboard highlights incidents, anomalies, and correlation rule activity in an easily digestible format.
Key Dashboard Features:
- Charts for incidents and anomalies.
- Visual overviews of correlation rules.
- Persona-based design tailored for SOC leaders.
- Actionable insights for quick decision-making.
Accelerated Onboarding with OVA VM Kickstarter
Exabeam introduces OVA VM kickstarter support for rapid provisioning of Site Collectors. Customers can now deploy virtual machines (VMs) preloaded with necessary configurations for seamless onboarding.
Advantages of the OVA VM Kickstarter:
- Speeds up Proof of Value (POV) testing and deployment.
- Ensures compatibility with multiple cloud environments.
- Reduces time spent on manual configuration.
Expanded Azure Log Ingestion Capabilities
Two new Cloud Collectors—Azure Activity Log and Azure Storage Analytics—enhance log ingestion for the Exabeam platform. By using EventHub instead of API, organizations benefit from improved scalability, reliability, and support for Microsoft’s recommended ingestion methods.
Features of the Updated Azure Collectors:
- Better scalability for high-volume log ingestion.
- End-to-end (E2E) support with enhanced performance.
- Direct alignment with Microsoft’s best practices.
Exabeam’s Comprehensive Cybersecurity Solutions
Exabeam continues to lead the cybersecurity market with its AI-driven platform that integrates advanced threat detection, behavioral analytics, and automated response. These capabilities enable organizations to combat increasingly complex threats with precision.
Core Platform Features:
- Behavioral Analytics: Identifies deviations from normal patterns to detect insider threats and anomalies.
- Automated TDIR Workflows: Speeds up incident response and enhances accuracy.
- Cloud-Native Design: Scalable architecture that supports hybrid and on-premises environments.
Supporting Businesses in Ukraine with NWU
NWU, the official distributor of Exabeam in Ukraine, ensures businesses and government organizations have access to cutting-edge cybersecurity solutions. By providing local expertise and tailored guidance, NWU empowers Ukrainian entities to optimize Exabeam’s platform for maximum security and efficiency.
NWU’s Offerings:
- Localized deployment support for seamless implementation.
- Advanced SIEM functionality tailored to regional needs.
- Tools for proactive behavioral analytics and threat management.
Looking Ahead to a Secure 2024
Exabeam’s January 2024 updates exemplify its commitment to delivering innovative tools that empower security teams. By improving threat detection, enhancing SOC insights, and streamlining onboarding, Exabeam enables organizations to stay ahead of evolving threats and maintain robust security operations.
Through partnerships like those with NWU, Exabeam continues to support diverse global regions, ensuring organizations everywhere can leverage advanced cybersecurity solutions.