TechValidate Research on LogRhythm

Challenges

• Addressed the following problems with their LogRhythm deployment:
  • Need for improved visibility into privileged user behavior
  • Lack of protection from advanced persistent threats
  • Need for faster response to security incidents
  • Require better correlation between events generated by different devices and applications
  • Detection of compromised and/or stolen credentials

Use Case

• Has used LogRhythm to do the following:
  • Locate the source(s) of a data breach
  • Provide evidence of suspicious or unauthorized user activity for an internal investigation
• Described their LogRhythm deployment in the following ways:
  • Deployed LogRhythm for 1-3 years
  • Used LogRhythm to monitor a centralized network with a large number of satellite or retail locations
  • Used LogRhythm to operate in a classified network with strictly controlled access to specific segments

Results

• Has used LogRhythm to detect/prevent the following security threats:
  • Compromised hosts
  • Improper access/use of confidential data
• Chose LogRhythm for the following features:
  • Powerful forensics
  • Ease-of-use
  • Real-time monitoring capabilities
• LogRhythm delivered the following:
  • Scalability and deployment flexibility
  • Enhanced, enterprise-wide visibility into event data
  • Enterprise-wide, in-depth user monitoring

Challenges

• Addressed the following problems with their LogRhythm deployment:
  • Lack of protection from external threats and hackers
  • Need for improved visibility into privileged user behavior
  • Lack of protection from advanced persistent threats
  • Require faster response to security incidents
  • Need for better correlation between events generated by different devices and applications
  • Detection of compromised and/or stolen credentials
  • Fraud detection

Use Case

• Has used LogRhythm to do the following:
  • Identify and/or prevent an advanced persistent threat
• Described their LogRhythm deployment in the following ways:
  • Deployed LogRhythm for longer than 3 years

Results

• Has used LogRhythm to detect/prevent the following security threats:
  • Malware or virus
  • Fraud
• Selected LogRhythm over the following products:
  • Splunk
• Chose LogRhythm for the following features:
  • Out-of-the-box compliance
  • Real-time monitoring capabilities
  • File integrity monitoring
• LogRhythm delivered the following:
  • Improved incident response and threat management capabilities
  • Enterprise-wide, in-depth user monitoring
• Rated LogRhythm’s differentiation compared to other SIEM solutions:
  • Performance: Superior
  • Advanced Correlation: Superior
  • Scalability: Superior
  • Compliance Support: Superior
  • Usability: Superior

Challenges

• Addressed the following problems with their LogRhythm deployment:
  • Need for improved visibility into privileged user behavior
  • Need for faster response to security incidents
  • Need for better correlation between events generated by different devices and applications
  • Better visibility into server & workstation logs. Meet PCI Requirements for log collection.

Use Case

• Has used LogRhythm to do the following:
  • Provide evidence of suspicious or unauthorized user activity for an internal investigation
  • Identify and/or prevent an advanced persistent threat
  • Establish a Privileged User Monitoring program
• Described their LogRhythm deployment in the following ways:
  • Deployed LogRhythm for 1-3 years

Results

• Has used LogRhythm to detect/prevent the following security threats:
  • External hacking attempts
  • Improper access/use of confidential data
  • Abnormal events.
• Selected LogRhythm over the following products:
  • HP/ArcSight
  • Splunk
  • NetIQ/Novell Sentinel
  • Solarwinds
• Chose LogRhythm for the following features:
  • Extensive, automated reporting
  • Ease-of-use
  • Rapid deployment
  • Real-time monitoring capabilities
  • File integrity monitoring
• LogRhythm delivered the following:
  • Scalability and deployment flexibility
  • Compliance automation and assurance
  • Enterprise-wide, in-depth user monitoring
• Rated LogRhythm’s differentiation compared to other SIEM solutions:
  • Performance: Superior
  • Advanced Correlation: Superior
  • Scalability: Superior
  • Compliance Support: Superior
  • Usability: Superior

Testimonials

Challenges

• Addressed the following problems with their LogRhythm deployment:
  • Need for improved visibility into privileged user behavior
  • Need for better correlation between events generated by different devices and applications

Use Case

• Has used LogRhythm to do the following:
  • Provide evidence to law enforcement for a criminal investigation and/or prosecution
  • Provide evidence of suspicious or unauthorized user activity for an internal investigation
  • Establish a Privileged User Monitoring program
• Described their LogRhythm deployment in the following ways:
  • Deployed LogRhythm for longer than 3 years

Results

• Has used LogRhythm to detect/prevent the following security threats:
  • Malware or virus
  • Stolen or compromised credentials
  • Compromised hosts
  • Improper access/use of confidential data
• Selected LogRhythm over the following products:
  • McAfee/NitroSecurity
  • LogLogic
• Chose LogRhythm for the following features:
  • Extensive, automated reporting
  • Ease-of-use
  • Rapid deployment
  • Out-of-the-box compliance
  • Real-time monitoring capabilities
• LogRhythm delivered the following:
  • Improved incident response and threat management capabilities
  • Compliance automation and assurance
  • Deployment and support simplicity
  • Enterprise-wide, in-depth user monitoring
• Rated LogRhythm’s differentiation compared to other SIEM solutions:
  • Performance: Far better
  • Scalability: Far better
  • Compliance Support: Superior
  • Usability: Superior

Challenges

• Addressed the following problems with their LogRhythm deployment:
  • Lack of visibility into privileged user behavior
  • Need for faster response to security incidents
  • Need for better correlation between events generated by different devices and applications

Use Case

• Has used LogRhythm to do the following:
  • Locate the source(s) of a data breach
  • Provide evidence to law enforcement for a criminal investigation and/or prosecution
  • Provide evidence of suspicious or unauthorized user activity for an internal investigation
  • Minimize the impact and/or spread of a malware incident
  • Establish a Privileged User Monitoring program
• Described their LogRhythm deployment in the following ways:
  • Deployed LogRhythm for 1-3 years
  • Used LogRhythm in a heterogeneous environment (multiple OS, network device and application vendors)

Results

• Has used LogRhythm to detect/prevent the following security threats:
  • Malware or virus
  • External hacking attempts
  • Compromised hosts
  • Improper access/use of confidential data
• Chose LogRhythm for the following features:
  • Out-of-the-box compliance
  • Real-time monitoring capabilities
• LogRhythm delivered the following:
  • Scalability and deployment flexibility
  • Real-time threat detection and advanced correlation
  • Improved incident response and threat management capabilities
  • Compliance automation and assurance
  • Enterprise-wide, in-depth user monitoring
• Rated LogRhythm’s differentiation compared to other SIEM solutions:
  • Performance: Far better
  • Scalability: Better
  • Usability: Better

Testimonials

Challenges

• Addressed the following problems with their LogRhythm deployment:
  • Lack of protection from external threats and hackers
  • Need for improved visibility into privileged user behavior
  • Weak protection from advanced persistent threats
  • Need for faster response to security incidents
  • Lack of detection of compromised and/or stolen credentials

Use Case

• Has used LogRhythm to do the following:
  • Provide evidence of suspicious or unauthorized user activity for an internal investigation
  • Establish a Privileged User Monitoring program
• Described their LogRhythm deployment in the following ways:
  • Deployed LogRhythm for 1-3 years

Results

• Has used LogRhythm to detect/prevent the following security threats:
  • Malware or virus
  • Stolen or compromised credentials
  • External hacking attempts
  • Compromised hosts
  • Stolen records
• Chose LogRhythm for the following features:
  • Extensive, automated reporting
  • Ease-of-use
  • Real-time monitoring capabilities
  • File integrity monitoring
• LogRhythm delivered the following:
  • Scalability and deployment flexibility
  • Real-time threat detection and advanced correlation
  • Improved incident response and threat management capabilities
  • Compliance automation and assurance
  • Enhanced, enterprise-wide visibility into event data
  • Deployment and support simplicity
  • Enterprise-wide, in-depth user monitoring
• Rated LogRhythm’s differentiation compared to other SIEM solutions:
  • Performance: Superior
  • Advanced Correlation: Superior
  • Scalability: Superior
  • Usability: Superior

Testimonials

Challenges

• Addressed the following problems with their LogRhythm deployment:
  • Need for improved visibility into privileged user behavior
  • Requirement for faster response to security incidents
  • Need for better correlation between events generated by different devices and applications

Use Case

• Has used LogRhythm to do the following:
  • Provide evidence of suspicious or unauthorized user activity for an internal investigation
  • Establish a Privileged User Monitoring program
• Described their LogRhythm deployment in the following ways:
  • Deployed LogRhythm for 1-3 years

Results

• Has used LogRhythm to detect/prevent the following security threats:
  • External hacking attempts
  • Improper use of privileged level accounts
• Selected LogRhythm over the following products:
  • HP/ArcSight
  • RSA enVision
  • Symantec
• Chose LogRhythm for the following features:
  • Powerful forensics
  • Ease-of-use
  • Rapid deployment
  • Real-time monitoring capabilities
  • File integrity monitoring
• LogRhythm delivered the following:
  • Real-time threat detection and advanced correlation
  • Improved incident response and threat management capabilities
  • Enhanced, enterprise-wide visibility into event data
  • Deployment and support simplicity
• Rated LogRhythm’s differentiation compared to other SIEM solutions:
  • Performance: Better
  • Advanced Correlation: Better
  • Scalability: Better
  • Compliance Support: Better
  • Usability: Superior

Testimonials

Challenges

• Addressed the following problems with their LogRhythm deployment:
  • Need for protection from external threats and hackers
  • Need for improved visibility into privileged user behavior
  • Need for faster response to security incidents
  • Need for better correlation between events generated by different devices and applications

Use Case

• Described their LogRhythm deployment in the following ways:
  • Deployed LogRhythm for 0-12 months
  • Used LogRhythm in a heterogeneous environment (multiple OS, network device and application vendors)

Results

• Has used LogRhythm to detect/prevent the following security threats:
  • Monitored memory issues on sql servers
• Selected LogRhythm over the following products:
  • Splunk
  • OSSIM
• Chose LogRhythm for the following features:
  • Powerful forensics
  • Extensive, automated reporting
  • Ease-of-use
  • Out-of-the-box compliance
  • Real-time monitoring capabilities
• LogRhythm delivered the following:
  • Improved incident response and threat management capabilities
  • Compliance automation and assurance
  • Enhanced, enterprise-wide visibility into event data
• Rated LogRhythm’s differentiation compared to other SIEM solutions:
  • Performance: Far better
  • Advanced Correlation: Far better
  • Scalability: Far better
  • Compliance Support: Far better
  • Usability: Far better

Testimonials

Challenges

• Addressed the following problems with their LogRhythm deployment:
  • Need for protection from external threats and hackers
  • Need for improved visibility into privileged user behavior
  • Need for protection from advanced persistent threats
  • Need for faster response to security incidents
  • Need for better correlation between events generated by different devices and applications
  • Need for detection of compromised and/or stolen credentials

Use Case

• Has used LogRhythm to do the following:
  • Establish a Privileged User Monitoring program
• Described their LogRhythm deployment in the following ways:
  • Deployed LogRhythm for 1-3 years

Results

• Has used LogRhythm to detect/prevent the following security threats:
  • Compromised hosts
  • Improper access/use of confidential data
• Selected LogRhythm over the following products:
  • IBM/Q1 Labs
  • McAfee/NitroSecurity
• Chose LogRhythm for the following features:
  • Advanced correlation/pattern recognition
  • Powerful forensics
  • Extensive, automated reporting
  • Ease-of-use
  • Rapid deployment
  • Out-of-the-box compliance
  • Real-time monitoring capabilities
  • File integrity monitoring
• LogRhythm delivered the following:
  • Scalability and deployment flexibility
  • Real-time threat detection and advanced correlation
  • Improved incident response and threat management capabilities
  • Compliance automation and assurance
  • Deployment and support simplicity
• Rated LogRhythm’s differentiation compared to other SIEM solutions:
  • Performance: Superior
  • Advanced Correlation: Superior
  • Scalability: Superior
  • Compliance Support: Superior
  • Usability: Superior

Testimonials

Challenges

• Addressed the following problems with their LogRhythm deployment:
  • Need for better correlation between events generated by different devices and applications

Use Case

• Has used LogRhythm to do the following:
  • Minimize the impact and/or spread of a malware incident
• Described their LogRhythm deployment in the following ways:
  • Deployed LogRhythm for 0-12 months

Results

• Has used LogRhythm to detect/prevent the following security threats:
  • Malware or virus
  • Compromised hosts
• Chose LogRhythm for the following features:
  • Extensive, automated reporting
  • Out-of-the-box compliance
  • Real-time monitoring capabilities
  • File integrity monitoring
• LogRhythm delivered the following:
  • Real-time threat detection and advanced correlation
  • Compliance automation and assurance
  • Enhanced, enterprise-wide visibility into event data
• Rated LogRhythm’s differentiation compared to other SIEM solutions:
  • Performance: Better
  • Advanced Correlation: Better
  • Scalability: Better
  • Compliance Support: Better
  • Usability: Better