McAfee launches ESM Cloud with incident investigations

Santa Clara, Calif. — (Business Wire) — McAfee today announced McAfee Enterprise Security Manager (ESM) Cloud, a new cloud-based security and information event management (SIEM) offering that supports the detection, incident response and threat hunting activities of a security operations team.

As a cloud-based solution, McAfee ESM Cloud extends the value of a traditional SIEM by providing faster onboarding of security telemetry, automatic updates and continuous system health monitoring.

McAfee ESM Cloud leverages the power of cloud computing to accelerate time to value for security operations centers through:

Advanced Analytics: real-time and historical analysis powered by rich contextual data to detect and prioritize threats, uncover anomalous user behavior and respond to attacker tactics, techniques and procedures (TTPs).

Time to Value: use case focused security content packs that deliver immediate value through pre-built threat detection rules and fully operational dashboards, reports, watchlists and alarms.

Unmatched Data Source Coverage: out-of-the-box coverage of 100’s of data sources across the endpoint, network and cloud-based services and applications.

Open Integration Fabric: open interface facilitates integration with McAfee and third-party solutions for immediate response to threats.

Simplicity and Operational Efficiency: auto-provisioning allows event ingestion from day one and improves efficacy by minimizing engineering efforts required to deploy and maintain infrastructure.

Continuous Improvement: new capabilities and enhancements delivered automatically, freeing customers from the burden of software updates and upgrades.

Scalability and Elasticity: cloud-based service supports dynamically changing customer requirements, automatically increasing scale and capacity to process vast amounts of data.

Today’s announcement also builds upon McAfee’s customer recognition within SecOps and SIEM. On July 3, McAfee was named a 2020 Gartner Peer Insights Customers’ Choice for SIEM, a distinction that is verified by end-user professionals, taking into account both the number of reviews and the overall user ratings.

Additional Resources: