Feature Announcement: AI-powered Zia Insights is now available in Log360 Cloud
The recent release also includes user and entity behavior analytics (UEBA).
We’re excited to introduce a powerful new addition to Log360 Cloud that will redefine how your SOC investigates and responds to threats: Zia Insights, a contextual AI capability designed to deliver fast, meaningful, and actionable investigation support.
This release also brings UEBA to Log360 Cloud, expanding your threat detection capabilities with machine learning-powered anomaly detection.
These updates mark a major step forward in our mission to help you move from detection to response faster with precision, context, and confidence.
Zia Insights: AI-powered security analytics
Zia Insights brings the power of contextual AI to your Log360 Cloud environment. Built on Azure OpenAI and backed by BYOK (Bring Your Own Key) support, Zia enhances your post-detection workflow with meaningful, readable insights.
With Zia Insights, you get:
AI-driven summarization: Human-readable overviews of logs, alerts, and incidents, complete with key entities, actions, and timeframes.
MITRE ATT&CK® mapping: Events are automatically linked to known adversary tactics and techniques for richer analysis.
Timeline visualization: Clearly see how a threat unfolded with an event-level timeline.
Contextual categorization: Logs are intelligently sorted into security, audit, and error types to guide your investigation.
Remediation assistance: Get actionable next steps for common alerts and errors to close the loop quickly.
UEBA: ML-based anomaly detection
The UEBA feature in Log360 Cloud brings advanced behavioral analytics to your SOC toolkit. With machine learning at its core, UEBA detects deviations from normal user and entity behavior, enabling proactive identification of insider threats, compromised accounts, and lateral movement.
UEBA includes:
ML-based anomaly detection: Unsupervised learning highlights anomalies without needing pre-configured rules.
Anomaly classification: Time-based, count-based, and pattern anomalies for precision detection.
Integrated risk scoring: Entities and users are ranked based on behavioral risk, so your team knows where to look first.
Watchlists: Monitor high-risk users, service accounts, or privileged identities with extra scrutiny.
Custom anomaly rules: Tailor anomaly detection logic to your organization’s unique environment.