Sumo Logic to Scale SecOps for Modern Enterprises with Wave of New Innovations Built on Leading Log Analytics Platform

Sumo Logic, the SaaS analytics platform to enable reliable and secure cloud-native applications, recently announced several native innovations across the Sumo Logic platform to give security analysts better visibility to solve new use cases and enable coordinated defense.

“Siloed tools and teams are a major barrier to scaling security operations and addressing the dynamic threat landscape of cloud-developed applications,” said Dave Frampton, senior vice president and general manager, Security Business Unit at Sumo Logic. “By combining SIEM, UEBA, SOAR, and log analytics with comprehensive observability capabilities in an integrated platform, we’re enabling seamless collaboration across the DevOps, application and security teams which all play essential roles in modern defense.”

Acknowledges one early adopter, “Sumo Logic gives us the opportunity to accelerate and expand growth and adoption of behavioral analytics across our organization. With the number of potential unknown threats to investigate, it is easier for us to make confident, data-driven decisions quickly,” said Brandon Hess, a Security Architect with deep experience in both the financial and professional services sectors.

Here are the new benefits:

Native UEBA threat detection for greater transparency, increased flexibility. Previous generations of UEBA anomaly detection have been plagued by problems with false positives, complexity and tuning limitations. Sumo Logic Cloud SIEM addresses these challenges with new UEBA capabilities delivering transparent, configurable, tunable detection and base-lining – fully integrated with all other detection tools. With this distinct advantage, Sumo Logic preserves the benefits of identifying unknown threats, insider threats, and user/entity profiling without the drawbacks of previous industry UEBA solutions. Extending its heritage as a leader in log analytics, Sumo Logic takes UEBA one step further to address new classes of use cases in application security and observability.

Efficient automation and enrichment from Cloud SOAR. Current SIEM offerings have difficulty contextualizing real threats and security analysts must pivot to other tools – threat intelligence, DDOS, malware, lateral movement or phishing, and a plethora of other enrichment capabilities – to deal with the huge volume and wide variety of alerts generated. Delivering automation at cloud scale, Sumo Logic introduces Cloud SIEM Automation Service, a marriage of Cloud SOAR with Cloud SIEM. Today, security analysts can more efficiently automate the data from alerts, telemetry and enrichment.

ML-powered detection, investigation. Built to help security engineers and security analysts tune threat detection logic to minimize false positives and boost true positives, Sumo Logic introduces Cloud SIEM Insight Trainer. Insight Trainer applies ML to understand patterns in the data and automatically suggests detection logic severity and tuning adjustments. When recommendations are applied on a regular basis, Sumo Logic Cloud SIEM enables SOC teams to focus attention on true indicators of compromise. As a result, overall security posture is improved with high-fidelity signals. To accelerate security investigations, Sumo Logic introduces its integration of ChatGPT with its powerful automation and orchestration solution, Cloud SOAR. With this integration, security analysts can quickly identify best practices within documented incident management framework with SOAR investigation workflows.

Featured

  • Maximizing Your Security Budget This Year

    7 Ways You Can Secure a High-Traffic Commercial Security Gate  

    Your commercial security gate is one of your most powerful tools to keep thieves off your property. Without a security gate, your commercial perimeter security plan is all for nothing. Read Now

  • Making Safety and Security Intrinsic to School Design

    Public anxieties about school safety are escalating across the country. According to a 2023 Gallup report, 44% of parents fear for their child’s physical safety at school, a 10 percentage-point increase since 2019. Unfortunately, these fears are likely to increase if the incidence of school tragedies continues to mount. As a result, school leaders are now charged with two non-negotiable responsibilities. The first, as always, is to ensure kids have what they need to learn, grow, and thrive. Sadly, their second responsibility is to keep the children in their care safe from threats and physical danger. Read Now

  • The Power of a Layered Approach to Safety

    In a perfect world, every school would have an unlimited budget to help secure their schools. In reality, schools must prioritize what budget they have while navigating the complexities surrounding school security and lockdown. Read Now

  • How a Security System Can Enhance Arena Safety and the Fan Experience

    Ensuring guests have both a memorable experience and a safe one is no small feat for your physical security team. Stadiums, ballparks, arenas, and other large event venues are increasingly leveraging new technologies to transform the fan experience and maintain a high level of security. The goal is to preserve the integrity and excitement of the event while enhancing security and remaining “behind the scenes.” Read Now

Featured Cybersecurity

Webinars

New Products

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge. 3

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening. 3

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure. 3