The Sherlock Security Platform

Initially developed in 1998 and continually enhanced during the past eight years, the proprietary Sherlock Security Platform filters, correlates and analyzes billions of security events every day. All security events from across our entire client base are fed into the Sherlock Platform, which condenses the events into meaningful security information that enables our Security Analysts to accurately assess risk in real-time using advanced analysis tools and techniques.

The Sherlock Security Platform aggregates events and logs from virtually any security device and critical information asset regardless of vendor. Support spans firewalls, network and host intrusion prevention systems, network intrusion detection systems, servers, routers and any other device that should be monitored for security or compliance purposes. The advanced Sherlock Platform enables native integration through APIs, such as Cisco's RDEP, Sourcefire's Event Streamer and Check Point's LEA, as well as seamless integration through standard protocols such as syslog, SMTP and SNMP. Additionally, Sherlock's agent technology can integrate with devices that log to a flat file or other non-standard format. This flexibility enables SecureWorks to provide the greatest contextual security information for our Security Analysts so that they can protect your current and future technology environment.

The Sherlock Platform's flexibility also allows SecureWorks to tailor our services to your unique environment. Sherlock can be customized to identify any specific events of interest to your enterprise, whether they are for compliance of security reasons.

Features and Benefits

• Integrated SIEM, Scanning, Intelligence, Management and Monitoring
• Quicker Identification and Prioritization of Threats
• Fewer False Positives and Incidents
• Vendor and Technology Neutral
• Proactive Scan and Block and Malicious Activity Blocking Capabilities
• Enterprise-Wide Aggregation, Normalization and Rule-Based Correlation
• Looking for Known and Unknown Threats in Real-Time
• Centralized Security Reporting
• Available with all Managed Security Services and SIM On-Demand