SIEMSIEM: which rules actually work in your infrastructure
Your SIEM is installed and the rules are loaded. But do you know which rules are waiting for the right events, and which ones are just idling?
The evolution of SIEM correlation rules
We regularly create new SIEM rules, but behind the scenes lies a more fundamental process —the evolution of the correlation rules themselves.
Detecting account compromise with SIEM
Detecting attacks related to compromised accounts with AI and other updates in Kaspersky SIEM.
Kaspersky NextMight it be time to move over to XDR?
Using our Kaspersky Next product line as an example, we explain the practical differences between XDR Optimum and EDR Optimum.
UEBA rules in a SIEM system
Using anomalies in the behavior of users, devices, applications, and other entities to detect cyberthreats.
Hardware for SIEM systems
How to estimate what and how much hardware will be needed for a SIEM system to assess the costs before deployment?
Malicious modules and the LSA process
Detection of tactics involving malicious DLL registration and other Kaspersky SIEM improvements in Q4 2024.
Kaspersky SIEM: early threat detection and other improvements
Rules for detecting atypical behavior in container infrastructure at the data collection stage, and other updates to our SIEM system.
Expanding the functionality of our SIEM system
Detection of techniques for disabling or modifying a local firewall, and other enhancements to the Kaspersky Unified Monitoring and Analysis Platform.
The evolution of the SIEM system
We’re expanding the capabilities of the Kaspersky Unified Monitoring and Analysis SIEM system by adding new normalizers and correlation rules.
How to increase the efficiency of SIEM
What’s new in Kaspersky Unified Monitoring and Analysis Platform 3.0.3.