uberAgent ESA - Endpoint Security Analytics

This is the searchhead app for the uberAgent ESA endpoint security analytics product. See the details tab for other required and optional components of the uberAgent solution. *************************************************** Please note that DATA MODEL ACCELERATION NEEDS TO BE ENABLED MANUALLY due to Splunk app certification policies. App versions without these restrictions are part of the download package that is available at https://uberagent.com/download/. See the documentation for details: https://uberagent.com/docs/uberagent/latest/kb/installation-upgrade/differences-when-using-uberagent-with-splunk-cloud/ *************************************************** uberAgent is an innovative Windows and macOS user experience monitoring and security analytics product for physical and virtual endpoints. uberAgent's UX highlights include detailed information about boot and logon duration (showing why and when boots/logons are slow), application unresponsiveness detection, network reliability drilldowns, process startup duration, application usage metering, browser performance per website, and remoting protocol insights. On the security side, uberAgent provides deep visibility at a low data volume through its flexible process tagging engine for identifying risky activity with predefined rules for many common threats. Try uberAgent yourself. Setting up a PoC is quick and easy: https://uberagent.com/docs