Key Capabilities
From log ingestion to network traffic analysis, SentriaOne xSIEM covers the full threat lifecycle with a single license. This page summarizes each capability at a high level.
Log Management
Supports smart and efficient search with an integrated dashboard.
- Smart search and integrated dashboard
- Flexible data retention options
- Customizable data export options
Security Information and Event Management
Integrates and correlates data from multiple sources with real-time analytics, anomaly detection, signatures, and machine learning.
- Real-time analytics and anomaly detection
- Signature and machine learning detection
- MITRE ATT&CK correlation
Network Traffic Analysis
Performs real-time analysis of east-west traffic, combining signature-based detection, anomaly detection, and deep parsing of major protocols.
- Signature-based and anomaly detection
- Deep protocol parsing
- File extraction and advanced malware detection (machine learning and sandbox)
Network Performance Monitoring
Performs detailed, deep protocol analysis passively and in real time.
- Passive, real-time deep protocol analysis
- Application and network performance visibility
Incident Response
Provides full case management with integrated response to other security tools.
- Complete case management
- Integrated response with other security tools
Capability summary
| Capability | Primary focus |
|---|---|
| Log Management | Searching, retaining, and exporting log data |
| SIEM | Correlation, analytics, and threat detection |
| Network Traffic Analysis | Threat detection in east-west network traffic |
| Network Performance Monitoring | Application and network performance visibility |
| Incident Response | Case management and coordinated response |
Next steps
Continue to How SentriaOne xSIEM Works to see how these capabilities fit into the platform data flow.