Malwarebytes Nebula

Applies to: Malwarebytes Nebula – cloud platform

Overview

Malwarebytes Nebula is a cloud-based security platform for complete endpoint protection. It allows the user to manage products such as Malwarebytes Endpoint Protection, Malwarebytes Incident Response, Malwarebytes Endpoint Detection and Response from a single cloud-based user interface (UI).

EventTracker, when integrated with Malwarebytes Nebula, collects logs and creates detailed reports, alerts, dashboards, and saved searches. These attributes of EventTracker helps the user to view/receive critical and relevant information regarding security, operations and compliance.

Reports contain a detailed summary of security events such as malware detection, URL filtering, suspicious activity, potentially unwanted programs activities and modifications, and many more in column-value pair.

Alerts are triggered as soon as a critical event is received by EventTracker for Malwarebytes Nebula, such as malware detection, URL filtering, suspicious activity, potentially unwanted programs activities and modifications, etc.

Dashboards represent all the activities happening in Malwarebytes Nebula. These include event categories with cumulative log counts/percentage, events that are either blocked, quarantined, found, restored, or deleted, and timeline of occurrences of security related activities.

These attributes or configurations of EventTracker allows administrators to quickly take appropriate actions against any threat/adversaries trying to jeopardize an organization’s normal operation.

Previous Next

Once Malwarebytes Nebula is configured to deliver events to EventTracker Manager, alerts, dashboards, and reports can be configured into EventTracker.

Security

Alerts

Malwarebytes Nebula: Threat has been detected - This alert is triggered as soon as EventTracker receives an event which is identified as suspicious activity, or malware activity, PUP or PUM discovery, etc.

Reports

Malwarebytes Nebula: Threat detection activities - This report outlines the summary of events associated with malware detection, exploit detection, URL filtering, etc. It contains, device name, device IPv4 address, device MAC address, message, filePath, action taken upon the activity, etc.

Scope

The configuration details are consistent with EventTracker version 9.2 and later, and Malwarebytes Nebula (Cloud platform).

Documentation

To configure AudioCodes to send logs to EventTracker, refer the How to Guide.

For more information please refer the Integration guide.