CCX Security Advanced for Splunk Enterprise

The CCX Advanced Security application for Splunk introduces a rich suite of security correlations and an alarm engine to the leading capabilities of Splunk Enterprise and Splunk Cloud to identify risk and threats. This enables customers to achieve a greater return on investment through business and application data analytics and visualisations. Our customers have the option of owning the SIEM platform and leveraging the Enosys Security Operations service, or taking advantage of a fully as-a-Service subscription based offering. - Notable Event Identification & Alerting - Security Event Investigation & Notification - Enosys Threat Intelligence Integration - Incident Resolution Recommendations - Enosys Advanced Correlations Library