Hi everyone,
We’re thrilled to announce a major upgrade to Log360 Cloud’s threat detection engine. This launch brings a reengineered architecture that improves accuracy, reduces noise, and makes detection workflows more efficient than ever.
Centralized detection console: Monitor and manage detections across MITRE ATT&CK®, UEBA, correlation, and threat intelligence engines from a single, unified interface.
Cloud-delivered detection content: Gain instant access to 1,500+ prebuilt MITRE-mapped rules and continuously updated detections for lateral movement, identity threats, endpoint security, and cloud attack coverage.
Unified security dashboard: Monitor rule coverage, alert trends, and detection health continuously.
Layered rule creation: Build Standard, Anomaly, and Advanced rules to match your security strategy without writing complex queries.
Object-level filtering: Scope rules by users, groups, and OUs to significantly cut false positives and alert fatigue.
Rule-tuning insights: Optimize rule performance with actionable recommendations based on hit frequency and alert volume.
Enhanced scalability: Multitier, horizontally scalable architecture with role-specialized log processing, ensuring reliable performance for distributed and growing environments.
Microsoft 365 support: Expanded coverage for Microsoft 365 services with deep insight into user activity, configuration changes, and data access events for compliance and security monitoring.