Introducing Nava SIEM Agent
Download as PPTX, PDF3 likes425 views
The document provides an overview of cloud security log aggregation features including retrieving and normalizing cloud provider audit logs, short-term archival, and outputs suitable for SIEM systems. It emphasizes the importance of this capability for compliance, security, and quicker incident response across multiple cloud environments. Additional functionalities include job management through a Windows service and a graphical interface for managing logs from various sources, including Google and Amazon.
Introducing Nava SIEM Agent
- 1. CLOUD SECURITY Cloud Audit Log Aggregation
- 2. Retrieves cloud provider audit logs Normalizes log formats Short-term archival of logs Outputs the logs in multiple formats Ready for consumption by SIEM/log server A must-have option for cloud security practitioners
- 3. Other Clouds* Active development under way. Login Activity Admin Activity Docs Activity Access Logs Intrusion Detection •Correlation across multiple log sources. •IP reputation analysis. •Departing employee watch list. Log Archiving •Comply with regulation. •Protect from tampering/loss by provider Normalized Logs Forensics •Conduct forensics in one place. •Unified view into all clouds. •Quicker incident response. Nava SIEM Agent SIEM Service
- 4. Service Runs as a Windows service. Helps manage and keep track of jobs. Client GUI Add, modify, or delete jobs Start and stop jobs Scripting interface Get status of all current running jobs
- 5. Nava SIEM Agent Authentication Google Admin Audit Logs Job #1 Google Authorization File Output (Normalized) Google Docs Audit logs Job #2 Google Authorization File Output (Normalized) Mappin g CSV Amazon S3 Bucket Logs Job #3 • • DB Access Key Id Secret Key Access Id Log Folder Windows Events Log Output
- 6. Email: sales@linkgard.com Download and run today: Nava SIEM Agent www.linkgard.com Become a reseller: www.navasolutions.com