LogRhythm will enable our security team to centrally manage security and more quickly address IT audit, SOX and GLBA reporting. We were impressed with LogRhythm’s ease of deployment, intuitive user interface, and powerful forensic investigation tools.

Wayne Proctor
VP of Information Security
Bank of the West

Enriching Event Data with Geolocation Information

Geolocation globe image Log Management and SIEM solutions provide numerous tools for automatically identifying and communicating what events are happening on your network. With the increasing globalization of information technology, understanding the geographic details of where an event takes place has become an increasingly critical component of incident identification and response.

Knowing the physical origin or destination of specific communications,whether inside or outside the network, can lend immediate urgency to any event. Being able to geographically isolate operations events such as failing communications devices, or to quickly identify the origin and scope of a security breach, can provide immediate value to enterprise IT organizations. The right information can reduce incident response times while providing better information for an appropriate response.
Download Enriching Event Data with Geolocation Information 'PDF'

LogRhythm’s automated geolocation capabilities provide important geographic context related to internal and external events impacting any sized IT environments.

**Mapping the Globe**
Challenge	With the increasing globalization of information technology, geographic context has become a critical component of IT operations and security. Not knowing the physical location of devices and applications involved in an event can handicap root cause analysis and slow response times.
Solution	LogRhythm automates the process of adding geographic context to any event data. This adds immediate context for performing root-cause analysis, forensic investigations and recognizing incident propagation.
Benefit	LogRhythm offers an automated geolocation service that automatically populates unknown geographic context,either from within the network or from external and anonymous IP addresses.

**Finding the Stowaway**
Challenge	In large enterprises high-volume communication is common, making it difficult to identify unauthorized or anomalous data transfers to or from rogue destinations. The problem is exacerbated when communication related to an event involves multiple sources.
Solution	LogRhythm’s intuitive, wizard-based setup for alarms and investigations makes it a simple process to establish blacklists that automatically identify any communication with unauthorized or rogue locations, whether inbound or outbound.
Benefit	Once a problem has been identified,LogRhythm provides numerous tools for understanding the scope and specific details. From interactive trending and relationship mapping to on-screen keystroke filtering, administrators can immediately zoom in on the relevant context surrounding a significant event.

**Maintaining the List**
Challenge	With today’s global workforce, many employees access company networks from different locations around the planet, including many who log in from multiple locations over a given period of time. Identifying improper usage of authorized credentials among thousands of legitimate logins is a difficult task.
Solution	LogRhythm’s data management allows geolocation data to be correlated against any field. LogRhythm users can easily create alarms that will send an alert when communications from authorized users is coming from geographic locations that are not on a predefined whitelist.
Benefit	When an alert is generated, all activity by that user or from that location can be immediately investigated with a simple right-click, providing a complete picture of suspicious behavior patterns tied to specific data points.

Products
One Integrated Solution
Log and Event Management
File Integrity Monitoring
Network and User Monitoring
Geolocation & Visualization
Reporting
Turnkey Appliances
High Availability Solutions
Software & Virtual Deployments
Advanced Agent
WebRhythm Remote Access

Applications
Overview
Compliance
SIEM
IT Optimization
Business Intelligence
Insider Threat/Fraud Detection
Forensics/Investigation
eDiscovery
Database Monitoring

Services
Professional Services
Training
Maintenance and Support

Resources
Overview
Compliance Solution Briefs
Datasheets
Use Cases
Case Studies
Compliance White Papers
Sample Reports
Customer Testimonials
In-Depth Product Demo
Request Online Demonstration
Multimedia Archives
Industry Info

Partners
Partners Overview
Technology Partners
Reseller Partners
Connect Login

Company
Overview
In the News
Press Releases
Events
Management Team
Careers
Contact
Privacy Policy
Request More Info
Site Map

Support
Customer Support Portal