A French company, a European commitment

TEHTRIS solutions are entirely developed in France and hosted in Europe. Discover the values of excellence and innovation that drive our teams.

SIEM

Collects, archives, correlates, and alerts 24/7

Monitor your fleet continuously, qualify your decision-making and save time by automating the processing of information from your infrastructure logs. 

Why TEHTRIS SIEM? ​

Configurable Hot Raw Data

Use all your active data with TEHTRIS SIEM to customize your tracking dashboards and complete your Alerts and Events views. Refine your cybersecurity strategy by performing predictive analyses based on SIEM’s nominal behaviors (comparison of past and current volumes, etc.).

Augmented detections and responses

Qualify your detections and organize your responses with TEHTRIS SIEM. Take advantage of our SOAR and its playbooks, our Cyber Threat Intelligence and the UEBA behavioral analysis engine (directly accessible with TEHTRIS SIEM) to hyperautomate your cybersecurity.

TEHTRIS SIEM: key module of your XDR

Correlate all your product security events with TEHTRIS SIEM, directly integrated within the TEHTRIS XDR Platform. Easily switch from a SIEM view to a global view of security events in the XDR Platform.

Qualify your logs to strengthen the security of your infrastructure

Centralize the correlation of all your logs, to prioritize your alerts in real time and deal with the large volume of data coming from your systems.

TEHTRIS SIEM automatically scans them from our library of parsers and connectors (continuously updated) and alerts you in case of incidents. Our interactive and customizable dashboards monitor your infrastructure 24/7 from log volume indicators or active sources. Accelerate your investigations by searching and monitoring IoC and customizable retention of Hot Raw Datas.

Adapt your SIEM to your business

Each infrastructure is different and has its own cybersecurity needs. Customize TEHTRIS SIEM to your business, formats and sources:

  • Supported format types: Syslog, Leef, CEF, JSON, CSV, KVP, XM and others
  • Supported sources: AWS, 0365, Proofpoint, Zscaler and others
  • Interactive augmented dashboards
  • Choose the alerting level and notification mode
  • Create and manage the rules (a catalogue of thousands of correlation rules is at your disposal)
  • Hot Raw Data configuration
  • Blacklisting or whitelisting of IoC and customization IoC databases

Detect unusual behavior automatically

Use the UEBA feature included in TEHTRIS SIEM to detect abnormal behavior in your fleet.

Based on a statistical analysis, Machine Learning and on other types of analysis on Windows logs collected by the SIEM, our UEBA compares the daily habits of users with the current activity to remove anomalies in case of suspicious activity.

Unusual actions, activity variations or abnormal user log-in times are automatically detected. All this information is uploaded to the TEHTRIS XDR Platform, where your analysts can access all the details that helped to resolve the anomaly.

Use case: automatic processing of your SIEM data through our SOAR

Any incident detected by TEHTRIS SIEM is directly reported to our SOAR to hyperautomate your investigations and responses.

Leverage detections from your solutions, including from external tools such as Zscaler, with the combined action of SIEM and SOAR.

When someone connects to IP addresses or domains that are identified as suspicious by TEHTRIS CTI, our SIEM generates an alert and the information is send to the SOAR. In the Playbook Zscaler – Blacklist URL for example, TEHTRIS SOAR automatically enriches the Zscaler denylist with these new domains, based on SIEM alerts. Your teams have no additional processing tasks to do.

Le TEHTRIS EDR s'intègre parfaitement à la solution cybersécuritaire ultime de TEHTRIS : la XDR Platform

Perfectly integrated
in the XDR Platform

When it comes to cybersecurity, orchestrating events and reacting to threats effectively and quickly is a fundamental challenge. One of the best ways to do this is with powerful automation and artificial intelligence. That’s what TEHTRIS offers with its SOAR integrated with the TEHTRIS XDR Platform.

Discover how we create hyper automation!

Titre MITRE ATTACK

MITRE ATT&CK compliance

MITRE ATT&CK is a knowledge base with a model of the behavior of a cyber attacker, reflecting the different phases of the attack life cycle according to the targeted platforms: Windows, Mac, Linux, mobile, etc.

Discover the compatibility of TEHTRIS XDR with MITRE ATT&CK

1

day to deploy TEHTRIS SIEM

6

months of log retention

100

countries where our technologies are deployed

Data Center, sauter vers le TEHTRIS EDR c'est faire le pari d'avoir une entreprise mieux protégée contre les cyberattaques

Take the leap to a more secure business.

Since its creation in 2010, TEHTRIS innovates and completes its defensive arsenal, through the different modules of the TEHTRIS XDR Platform.

Opt for a truly pragmatic management of modern threats.
Detect silent intrusion campaigns and regain control over all attack vectors.

FAQ

* © 2020 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

** Gartner and Market Guide are registered trademarks of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.

Gartner Market Guide for Extended Detection and Response, Craig Lawson, Peter Firstbrook, Paul Webber, 8 November 2021
TEHTRIS recognized as a Representative Vendor in the 2021 Market Guide for Extended Detection and Response.
Craig Lawson, Peter Firstbrook, Paul Webber, 8 November 2021

Gartner Innovation Insight for Unified Endpoint Security, Rob Smith, Dionisio Zumerle, 12th November 2020,
Gartner Market Guide for Mobile Threat Defense, Dionisio Zumerle, Rob Smith, 29th March 2021,
Gartner Peer Insights reviews constitute the subjective opinions of individual end users based on their own experiences and do not represent the views of Gartner or its affiliates.

 

Cyber or not cyber ?

Once a month, receive the essential news and cyber watch by subscribing to the TEHTRIS newsletter.