EclecticIQ Platform Integrations

The AlienVault Open Threat Exchange (OTX) is a system for sharing threat intelligence among OSSIM users and AlienVault customers.

Help your system administrators to respond faster to attempted intrusions by adding essential context to your IT security controls.

Integrate real-time threat intelligence into:

• Snort
• Suricata
• Any standards-based IPS/IDS

IBM QRadar SIEM consolidates log events and network flow data from thousands of devices, endpoints and applications distributed throughout a network. It normalizes and correlates raw data to identify security offenses, and uses an advanced Sense Analytics engine to baseline normal behavior, detect anomalies, uncover advanced threats, and remove false positives.

Infoblox DDI is a industry-leading, integrated, and centrally managed approach to delivering enterprise-grade DDI. It uses the patented Infoblox Grid^TM technology to ensure high availability DNS, DHCP, and IPAM services throughout your distributed network. Infoblox DDI makes it easier for you to achieve higher levels service uptime, security, and operational efficiencies across diverse infrastructure, including on-prem, cloud and hybrid deployments.

By providing superior out-of-the-box capabilities, automated interaction with existing security management solutions, and user-customization, McAfee® Active Response greatly narrows the window of opportunity for attackers to damage your computing assets and corporate brand.

LogRhythm unifies next-generation SIEM, log management, network and endpoint monitoring, user entity and behavior analytics (UEBA), security automation and orchestration and advanced security analytics. In addition to protecting customers from the risks associated with cyber threats, LogRhythm provides unparalleled compliance automation and assurance, and enhanced IT intelligence.

Micro Focus ArcSight ESM identifies and prioritize threats in real time so you can respond and remediate quickly. Correlate security logs from multiple data feeds, improve the accuracy of security alerts with complex use cases, and uncover advanced cyber attacks that previously went undetected.

Using the NetWitness app, RSA users are able to leverage the power of EclecticIQ Platform directly from the NetWitness interface. Users can receive IOCs from the platform to trigger security alerts, and send sightings back to EclecticIQ Platform.

• Operational Intelligence optimizes your IT, security and business performance
• Collect operational data (including logs, clickstreams, sensors, stream network traffic, web servers, custom applications, hypervisors, containers, social media and cloud services)
• Search, monitor and analyze data to discover powerful insights for security and IT operations.
• Understand trends, patterns of activity and behavior to make more informed decision

• Operational Intelligence optimizes your IT, security and business performance
• Collect operational data (including logs, clickstreams, sensors, stream network traffic, web servers, custom applications, hypervisors, containers, social media and cloud services)
• Search, monitor and analyze data to discover powerful insights for security and IT operations.
• Understand trends, patterns of activity and behavior to make more informed decision