Trellix ESM delivers performance, actionable intelligence, and solution integration at the speed and scale needed for security organizations. You can quickly prioritize, investigate, and respond to hidden threats and meet compliance requirements.
Key Trellix ESM features include:
Analyst-centric dashboards, reports, reviews, rules, and alerts
Content packs - prepackaged sets of alarms, views, reports, variables, correlation rules, and watchlists that address common security use cases.
Predefined dashboards, audit trails, and reports for global regulations and control frameworks
Customizable compliance reports, rules, and dashboards.
Ability to enrich events with contextual information (such as privacy solutions; threat data and reputation feeds; and identity and access management systems)
Near real-time or historical aggregation and correlation of suspicious or confirmed threat information against event data
Ability to collect data from third-party security vendor devices and threat intelligence feeds
Rapid access to long-term storage of event data
Scalable data architecture that collects and correlates log events from multiple years
On-demand queries, forensics, rules validation, and compliance
SOAR support, executing SOAR playbooks.
IPv6 compatability from version 11.7.x.