Overview
EMET malicious user journey analytics for SAP powered by Reveal Security is a leading security analytics tool that uses user journey analytics to detect malicious activity for SAP.
The solution provides the following benefits:
- User Journey Analytics: User Journey Analytics is based on the analysis of activity sequences performed while using an application, in contrast with UEBA, which analyzes each activity individually and then builds a timeline. The sequence provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. Higher quality alerts mean security analysts reduce wasted time on false positives and alert for cases other products fail to notice.
- Multiple Journey Profiles per User: Leveraging RevealSecurity's patented clustering engine - tailored for clustering user journeys - TrackerIQ automatically learns multiple journey profiles across applications. Detecting anomalous journeys by comparing users to themselves and their peers provides an extremely high signal-to-noise ratio.
- Application Layer Detection and Response: TrackerIQ complements XDR solutions at the business application layer to detect threats and fraud. Existing detection solutions are focused on the infrastructure layers and on access to business applications, resulting in very limited effectiveness against malicious insiders as well as external attackers who succeed to bypass authentication mechanisms.
- Application Agnostic Detection: The detection model is applied to any SaaS or custom-built application, analyzing user journeys in and across applications to detect anomalies. This model eliminates the need to understand business application logic and no rules are required.
For Splunk customers, TrackerIQ connects natively to Splunk, offering simpler, streamlined deployment. EMET's Splunk experts will assist Splunk customers to configure and connect their Splunk and TrackerIQ deployments for an easy deployment experience. The product pricing includes up to 1 million log records processed per month. For more than 1 million log records processed per month, please ask for a private pricing proposal.
Highlights
- Application User Journey Analytics - User Journey Analytics is based on the analysis of activity sequences performed while using an application, in contrast with UEBA, which analyzes each activity on its own and then builds a timeline. The sequence provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. Higher quality alerts means security analysts reduce wasted time on false positives and alert on previously undetected cases.
- Multiple Journey Profiles per User - Leveraging RevealSecurity's patented clustering engine - tailored for clustering user journeys - TrackerIQ automatically learns multiple journey profiles per user across applications. Detecting anomalous journeys by comparing users to themselves and their peers provides an extremely high signal-to-noise ratio.
- Application Layer Detection and Response - TrackerIQ complements XDR solutions at the business application layer to detect threats and fraud. Existing detection solutions are focused on the infrastructure layers and on access to business applications, resulting in very limited effectiveness against malicious insiders as well as external attackers who succeed to bypass authentication mechanisms.
Details
Features and programs
Financing for AWS Marketplace purchases
Pricing
Instance type | Product cost/hour | EC2 cost/hour | Total/hour |
---|---|---|---|
t2.xlarge | $120.00 | $0.202 | $120.202 |
m5.xlarge Recommended | $120.00 | $0.214 | $120.214 |
m5.2xlarge | $120.00 | $0.428 | $120.428 |
m5.4xlarge | $120.00 | $0.856 | $120.856 |
c4.2xlarge | $120.00 | $0.453 | $120.453 |
Additional AWS infrastructure costs
Type | Cost |
---|---|
EBS General Purpose SSD (gp3) volumes | $0.088/per GB/month of provisioned storage |
Vendor refund policy
Contact us at contact-us@midlink.co.il
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.