BlueVoyant has announced (managed extended detection and response) MXDR for Splunk at Splunk.conf23. The new service integrates Splunk SIEM (security information and event management) capabilities with supported EDR (endpoint detection and response) partner to provide a cloud-native, integrated security solution enabling risk illumination, alert validation through multiple sources as well as remediation across multiple platforms including endpoint, IoT (internet of things), cloud workloads, and networks. BlueVoyant’s content allows for updates to meet tactics and risk based alerting, which thwarts attackers who try to use oft-benign actions to evade detection.
“BlueVoyant’s MXDR for Splunk enables clients to combine the capabilities of Splunk and supported EDR partners for increased visibility and more response actions”, says Anthony Giallombardo, director of product management for BlueVoyant’s Splunk offerings. “Splunk clients want to eliminate blind spots in their data silos, streamline operations and workflows, and reduce total cost of ownership without sacrificing the great observability capabilities Splunk provides. With BlueVoyant’s MXDR for Splunk, clients can have an integrated best of breed SIEM and EDR tech stack.”
Key components of BlueVoyant’s MXDR for Splunk include:
- Clients’ ability to collect, monitor, and analyse security data across on-premises, hybrid, and multi-cloud environments in a single platform.
- Cloud-native SIEM with real-time visibility to identify security threats and remediate them.
- The reduction of client data burden by 20% or more with a proprietary data readiness model that improves data quality and reduces costs.
- The ability to triage of threats and eliminate more than 90% of them with advanced automation to reduce risk and required resources.
- Rigorous risk based alerting (RBA) alerts to warn clients of threat actors who use often benign activities that may lead to malicious intent.
- Continuous improvement of clients’ Splunk instances delivering security content faster and better coverage amongst all data sources.
- The availability of numerous bundles of workshops, retainers, and professional services to help clients optimise, implement, manage, monitor, and protect their Splunk instance.
Cloud migration and cloud migration: Co-delivery. The company has more than 200 active Splunk certifications. In 2022, BlueVoyant expanded its Splunk go-to-market by including its offerings on the Amazon Web Services (AWS) Marketplace.
This week at Splunk .conf23, BlueVoyant will delve into the ways organisations can maximise their investments leveraging MXDR for Splunk.
For more information on BlueVoyant’s new offering, please visit our website here.
Comment on this article below or via Twitter: @IoTNow_OR @jcIoTnow
