Security Information and Event Management

SecureWorks' Security Information and Event Management service leverages our proprietary Sherlock Security Management Platform to provide real-time collection, correlation, analysis and reporting of security events across your enterprise. A breakthrough alternative to software implementations of SIEM products, SecureWorks' SIEM Service can be implemented in days to provide you with enterprise-class SIEM technology without the deployment, maintenance or management overhead.

Service Features

Using the advance correlation capabilities and intelligence within the Sherlock Platform, SIEM Service processes logs and alerts from across your environment to identify security and compliance events of interest. Events are presented to you in real-time via the secure, web-based SecureWorks Portal for assessment and response. All components of the Sherlock Platform are fully managed and maintained by SecureWorks' security professionals to ensure optimum performance within your environment, allowing your staff to focus on investigating and mitigating threats to your enterprise. Additionally, you can create your own correlation rules within the Portal as needed to further tailor correlation and automated analysis.

The SecureWorks Portal also provides powerful reporting with our SIEM Service. Featuring an extensive assortment of pre-built security and compliance reports as well as an intuitive reporting wizard for generating customized reports, the Portal streamlines the reporting process and facilitates secure distribution of security and compliance information to appropriate staff, auditors and management.

As a SIEM Service client, you will also have instant and unlimited access to our certified security professionals at our Security Operations Centers. These experts are available 24x7x365 to provide support for your enterprise at no additional cost.

Key service features include:

• Collects logs and alerts from virtually any security device or information asset
• Performs advanced event correlation and analysis "out-of-the-box"
• Provides robust security and compliance reporting
• Leverages our highly scalable, proven SIEM platform
• No SIEM management or maintenance overhead
• Implemented in days — not weeks or months
• Flexibility to upgrade to the full breadth of SecureWorks' services as needed
• Includes access to SecureWorks' certified experts 24x7