This is the (optional) Enterprise Security (ES) companion app for the uberAgent ESA security analytics product. See the details tab for other required and optional components of the uberAgent solution.

The uberAgent ESA ES companion app provides support for Splunk's risk-based alerting in ES. As such it requires a working uberAgent infrastructure on Splunk.

uberAgent is an innovative Windows and macOS user experience monitoring and security analytics product for physical and virtual endpoints.

uberAgent's UX highlights include detailed information about boot and logon duration (showing why and when boots/logons are slow), application unresponsiveness detection, network reliability drilldowns, process startup duration, application usage metering, browser performance per website, and remoting protocol insights.

On the security side, uberAgent provides deep visibility at a low data volume through its flexible process tagging engine for identifying risky activity with predefined rules for many common threats.

Try uberAgent yourself. Setting up a PoC is quick and easy: https://uberagent.com/docs