EventTracker Endpoint Security

OverviewResources

EventTracker Endpoint Security provides a predictive threat prevention platform by applying deep learning with its advanced artificial intelligences to cybersecurity.

Its on-device solution protects against zero-day threats and APT attacks with unmatched accuracy. It safeguards the enterprise’s endpoints and mobile devices against threats on any infrastructure and provides protection against unknown and evasive cyber-attacks.

EventTracker helps to monitor events from EventTracker Endpoint Security.

Its dashboard, alerts and reports help to analyse the attacks/virus detected on the systems, changes in polices, login failure, non-compliance events and inform about the system and its activities.

Alerts trigger when any threat/virus or login failure on console is detected.

EventTracker knowledge pack for EventTracker Endpoint Security allows you to monitor the following components:

Security– Threat Detected, Login Failure, Security Event Prevented
Operation – Administrator Management
Compliance – Login and Logout Activity, Non-compliance events

Previous Next

Security

Alerts

EventTracker Endpoint Security: Login Failed: This alert is generated when login failure is detected in EventTracker Endpoint Security.
EventTracker Endpoint Security: Threat Detected: This alert is generated when threat/virus is detected.
EventTracker Endpoint Security: Threat Prevented: This alert is generated when threat is prevented.

Reports

EventTracker Endpoint Security Threat Activity Report – This report provides information related to any attack or malware/virus detected by EventTracker Endpoint Security. Report contains source IP, host name, filename, filepath, filetype, threat type and other information for further analysis.

Operation

Reports

Deep Instinct Administrator Activity Report - This report provides information related to any attack or malware/virus prevented by Deep Instinct. Report contains source IP, host name, filename, filepath, filetype, threat type and other information for further analysis.

Compliance

Alerts

EventTracker Endpoint Security: Non-Compliance Events: This alert is generated when non-compliance event is detected.

Reports

EventTracker Endpoint Security: Login Activity Report - This report provides information related to all the login and logout activity detected in EventTracker Endpoint Security. Report contains username, source IP and activity details with other information.

Scope

The configuration details are consistent with EventTracker version 9.2x and later, and EventTracker Endpoint Security.

Documentation:

To configure EventTracker Endpoint Security to send logs to EventTracker, refer to the How-to Guide.

For more information please refer to the Integration guide