Security Data Lake for MDR-Daily Volume

The daily volume for MDR expands the telemetry available to SOC analysts.

Description

Managed detection and response runs on context: the more sources analysts can see, the more precise the detection and the faster the response. GravityZone Security Data Lake extends MDR coverage with third-party telemetry. It determines how much additional log volume flows into the platform each day.

With that data, SOC analysts can correlate third-party logs with GravityZone data, speed up triage and stop threats earlier in the attack lifecycle. Fewer false positives and better prioritization through the asset risk model come with it.

The volume you need follows your sources. At general availability, more than 100 integrations are available, plus generic channels such as Syslog. When starting out, the focus is on firewalls: Palo Alto, Checkpoint, Cisco ASA, Fortinet, Juniper, pfSense and SonicWall.

What's included

• Extended MDR coverage – third-party telemetry supplements GravityZone data
• Cross-source correlation – more context for the analysts
• Faster triage – stop threats earlier in the attack lifecycle
• Over 100 integrations – plus generic channels such as Syslog

Who it's for

Organizations running MDR or MXDR that want their analysts to see more of the environment — especially where decisions have so far hung on firewall data.

Good to know

• Requirement – this option requires the MDR base license
• Availability – the data lake is not available for GravityZone EDR Cloud
• Renewal – through the renewal product of the same name

All prices net plus 19% VAT.