Use Case Overview
SentriaOne xSIEM adapts to different cybersecurity requirements with a single integrated platform. This section describes common use cases and shows which capabilities and dashboard pages support each one. The How to pages are step-by-step guides that follow a real example from start to finish.
By industry
| Industry | Typical goals |
|---|---|
| Finance | Protect sensitive financial data, meet regulatory compliance, and detect insider threats and network anomalies in real time |
| Government | Secure critical national infrastructure with advanced threat detection, full network visibility, and security hygiene monitoring |
| Enterprise | Scale security operations across complex, distributed IT environments with a single platform and a single license |
Each industry combines the security use cases below in different proportions.
By security use case
| Use case | Goal | Main capabilities |
|---|---|---|
| Threat Detection | Detect known and unknown threats using ML, behavioural analytics, and signature-based detection across all network layers | SIEM, NDR, IR |
| How to analyze top affected internal IPs | Investigate an affected internal IP step by step — from detection to evidence and tracking | SIEM, NDR, IR |
| How to analyze a detection | Analyze a single detection from the Detections page — signals, evidence, participants, and decision | SIEM, NDR, IR |
| Network Visibility | Gain complete east-west and north-south traffic visibility with deep L2–L7 protocol analysis, application performance, and network performance monitoring | NDR, NPM |
| How to find who accesses a website | Find which internal hosts access a domain, from DNS activity down to the records and devices | NDR, Log Management |
| How to troubleshoot slow connections | Find out whether a slow application is caused by the network, the server, or something else — using TCP health, latency, and connection states | NPM |
| How to build a custom dashboard | Build a dashboard from folder and widgets to a saved, shareable result | Log Management, NPM |
| Compliance | Simplify audit readiness with centralized log management, flexible data retention, reporting, and dashboard analytics | SIEM, Log Management |
See Key Capabilities for a description of each capability.