Information Intelligence Association
Splunk
Splunk- Enterprise security
Overview
Splunk’s SIEM offerings came out on top in Deployment and Management and in second for Ease of Use – no small achievement in a technology known for its complexity. Splunk Enterprise Security can be delivered just about every way imaginable: IaaS, cloud-hosted, software, appliance, hybrid. Splunk also scored high in Detection and Response, with reporting, data visualization, alerting, application and log monitoring and analytics some of the features praised by users.
Features
Data Mapping, Data Catalog
Ingest machine data from multicloud and on-premises deployments for full visibility to quickly detect malicious threats in your environment
Activity Mapping
Investigate and correlate activities across multicloud and on-premises in one unified view to quickly identify a potential security incident