SIEM KOMRAD


    komrad_Logo.jpg

    Overview


    Komrad is a SIEM software product for IT-infrastructure. It is designed for threat detection, alerts and incident response, as well as for maintaining compliance with security regulations.

    Advantages

    • centralized collection and analysis of event logs from security facilities, workstations, servers and network equipment;
    • remote configuration control and monitoring for workstations;
    • alerting and incident response;
    • maintaining compliance with security regulations, statistics collection and generating reports for compliance purposes.

    Technical Specification

    • operates on a 64-bit CPU architecture (Intel x86-64); security events processing speed is up to 5000 EPS (events per second) on a single node of the network; 
    • supports wide-ranging technologies for integration with data sources (security facilities, workstations, servers, network equipment) including Syslog, Syslog-ng, SNMPv2, SNMPv3, Opsec, HTTP, SQL, ODBC, WMI, FTP, SFTP, sockets Unix/Linux, plain log, SSH, Rsync, Samba(NetBIOS), NFS, SDEE, RDEP, OPSEC, CPMI; 
    • generates the following reports: list of network devices, security events data storage, threats alerts, incident response, list of detected vulnerabilities, overall network status, availability of network devices, network statistics; 
    • provides integration with the following national secure platforms and security facilities: OS MSVS, OS Astra Linux, Scanner-VS, Firewall & IDS Rubikon, XSpider.

    User manual: Download

    Certificate

    The Russian Ministry of Defense and the Russian Federal Service on Technical and Export Control certify Komrad.