Hands typing on a laptop keyboard behind a glowing digital interface featuring data streams, a blue security shield, and the acronym SIEM.

Cribl Launches Cribl Detect, a New SIEM Platform

Available through Cribl.Cloud, the product combines detection management, AI-assisted triage and incident investigation.

Cribl announced Cribl Detect, a security information and event management (SIEM) product built on its telemetry platform. It is now available to Cribl.Cloud customers.

Cribl said analysts can investigate security data where it is already stored, including within existing tools, data lakes and object stores. The product can also apply detection logic while telemetry travels through a pipeline.

Cribl Detect includes detection posture management that maps an organization's existing rules to MITRE ATT&CK techniques. The company said it can identify missing data inputs, malfunctioning or noisy rules and techniques without detection coverage. It also provides recommended actions and remediation workflows, while Cribl's AI security operations center capabilities support automated detection and assist analysts during alert triage, investigation and disposition.

About the Author

Danielle Naidu is assistant editor for Security Today, Campus Security Today, Occupational Health & Safety and Environmental Protection Online.

Featured

New Products

  • DMP VK™ VMS With XV Plus Gateways

    DMP VK VMS With XV Plus Gateways

    Build flexible video monitoring systems with cloud-based video management, tiered AlarmVision analytics and gateways that need no inbound ports or separate VPN appliance.

  • Theia Technologies building fisheye

    Theia Technologies Linear Optical Technology®

    Learn how ultra-wide, zero-distortion rectilinear lens design improves spatial accuracy and eliminates the need for software de-warping in real-time robotic and automation systems.

  • Cover image for IDP ProCare

    IDP ProCare™ Premium Support Program

    Minimize downtime and secure uninterrupted credential production with priority technical support, overnight advanced unit replacements, and proactive system health reviews.