Exabeam, the security analytics, and automation company announce Exabeam Fusion XDR and Exabeam Fusion SIEM, two new powerful cloud-delivered security products that efficiently solve threat detection, investigation, and response (TDIR) without disrupting an organization’s existing technology stack.
Exabeam Fusion products integrate behavioral analytics and automation capabilities to deliver the outcomes-based approach to security operations (SecOps). The Fusion product line showcases an open system approach to extended detection and response (XDR) and security information and event management (SIEM) enabling any organization to acquire an advanced TDIR layer on top of existing IT and security stacks.
Advanced behavior analytics
Exabeam is also announcing the general availability of its TDIR use case packages that are integrated into Fusion XDR and Fusion SIEM. “We’ve been using Exabeam as our XDR for some time now as the technology can see and connect data from far more locations than just our endpoint detection and response solutions,” said Marc Crudgington, CISO at Woodforest National Bank.
Exabeam is also announcing the general availability of its TDIR use case packages
“It’s exciting to see Exabeam package its advanced behavior analytics and automation capabilities into these forward-thinking cloud products. We rely on Exabeam Fusion XDR in our SOC operations to help us more quickly detect, investigate and remediate threats — an essential outcome in keeping our networks, business operations, employee and customer data continuously protected.”
Malicious insider attacks
Exabeam is reimagining XDR with the launch of Fusion. Effective SOCs have clearly defined outcomes aligned to TDIR workflows. The cloud-delivered products contain prescriptive workflows guided by pre-packaged, use case specific content to enable security analysts to defend against common and evolving threats including external, compromised insider, and malicious insider attacks.
“Breach scenarios are still too frequent, with common attack techniques like lateral movement, data exfiltration, and privilege escalation appearing legitimate or spanning across siloed security products,” said Adam Geller, chief product officer at Exabeam.
Security analytics tools
The majority of security analytics tools on the market only automate detection and response
“When security analysts are unable to connect the dots between various systems, malicious attacks go undetected and lead to security breaches. Delivering Exabeam Fusion XDR and Exabeam Fusion SIEM from the cloud enables us to accelerate feature and functionality development, while deploying a use case framework that consistently delivers successful outcomes for our customers.”
According to an Exabeam-sponsored Ponemon research study that surveyed 596 IT and IT security practitioners, security teams spend 12 percent of their time detecting threats, 36 percent triaging, 26 percent investigating, and 26 percent responding. The majority of security analytics tools on the market only automate detection and response. The Fusion product line automates 100 percent of the TDIR workflow, including the bulk of the time it takes — 62 percent — for security teams to conduct triage and investigation.
Critical security issues
Exabeam Fusion combines behavior analytics, TDIR automation, and pre-built integrations with hundreds of third-party security and productivity tools to overcome weak signals from multiple products and find complex threats missed by other tools.
Exabeam Fusion offerings accurately differentiate normal behavior from abnormal activity
Customers can easily identify and respond to critical security issues, intrusions, and attacks from a single, centralized control plane, substantially increasing analyst productivity and reducing response times. Exabeam Fusion offerings accurately differentiate normal behavior from abnormal activity, apply risk scoring to identify notable users and events, and build Smart Timelines™ to automatically reconstruct security incidents providing accelerated investigation and response.
Cloud-Delivered products
“With Exabeam Fusion, organizations can unify their current security tools to more efficiently detect, investigate, and respond to threats without the need for large-scale rip and replacements of their entire security stack,” said Ralph Pisani, President at Exabeam. “Our customers can keep their existing tools and merge our fully automated TDIR layer on top to benefit from Exabeam’s fast innovation, superior experience and accelerated time to value.”
Gorka Sadowski, chief strategy officer at Exabeam, added, “The Fusion product launch is in line with our strategic direction to expand beyond SIEM and solve the industry’s biggest SecOps challenges by offering a set of world-class, cloud-delivered products and solutions to the marketplace.” Exabeam Fusion SIEM includes all Fusion XDR features and capabilities plus access to centralized log storage, powerful search, and compliance reporting. Fusion XDR and Fusion SIEM come in two editions, Core and Enterprise, to support organizations of all sizes.
