LogRhythm has announced its 7th consecutive quarterly release. This announcement comes on the heels of over 200 new features released throughout 2023 across the company’s self-hosted and cloud-native SaaS SIEM platforms, LogRhythm SIEM and LogRhythm Axon. The continued momentum of releases cement LogRhythm’s commitment to driving innovation and addressing the cybersecurity industry’s greatest challenges in defending against digital weaponisation.
“As LogRhythm’s SIEM capabilities continue to expand, our primary goal remains delivering powerful security platforms that help customers quickly and confidently secure their environments,” said Chris O’Malley, CEO of LogRhythm. “Whether our customers prefer the control and customisation of a self-hosted solution or the scalability and agility of the cloud, LogRhythm provides the tools and expertise to navigate the evolving threat landscape with confidence.”
Empowering Analyst Efficiency: Faster to Detect, Faster to Respond
LogRhythm’s ongoing dedication to optimising SOC team and analyst efficiency is exemplified by recent innovation exclusive to LogRhythm Axon. Unlike other vendors, seamless integration with broad case management improvements provides a unified view of each case within the user interface, eliminating the need to switch to separate search functionality when drilling down for additional investigation. This patent pending, integrated methodology centralizes case-related information and empowers security analysts with a comprehensive, user-friendly experience, ensuring they have all necessary insights readily available when needing to detect and respond to cyberthreats.
Expanded SaaS-based and Cloud-Native Security with LogRhythm Axon
- New, patent pending interactive single screen investigation reduces mean time to respond (MTTR) by highlighting contextual insights of cases with drill-down capabilities of log sources and security analytics in a single pane of glass
- Improved Assisted Search feature increases analysts’ productivity with suggestions of recent searches, search lists, and search queries
- Additional collector for Microsoft Office 365 Management API expands visibility by enabling monitoring, analysis, and data visualisations about user, admin, and policy actions from Office 365 and Microsoft Entra
- Enhancements to Axon Agent management increases efficiency for on-prem data collection by making it easier to deploy and upgrade agents
Improved Log Source Onboarding and Platform Experience with Self-Hosted LogRhythm SIEM
- Expanded support to onboard additional Beats and Open Collectors from a single location, cutting the workload in half
- Simplified Windows Event log onboarding and improved analyst workflows when reviewing alarm notifications
- Broadened LogRhythm’s library of supported log sources and parsing capabilities to enhance the SIEM’s ability to correlate and analyse data effectively
LogRhythm NDR
- Toggle button to hide safelisted items in the Hunt Activity Page increases analyst efficiency by allowing them to focus on the highest priority detections
- Expanded IP geolocation contextualisation with country and region empowers analysts to make quick decisions
- Enhancements to detection engines of machine learning DNS models reduces false positives
