Frequently Asked Questions

Sensors continuously monitor your network and systems for malicious activities or policy violations that can lead to network intrusions. Artificial intelligence within the Comodo SIEM combines correlation rules our Threat Lab develops for known attacks with rules customized for your environment to proactively alert our SOC to any possible endpoint compromise.

Investigate

Dedicated incident response analysts within the Comodo SOC continuously
monitor your environment. Three tiers of analysts investigate any
incidents by integrating relevant networking log and security sensor
events, correlating, analyzing, and enriching data as necessary. They
then evaluate the impact of the incident on the customer’s environment
and develop a detailed incident response plan.

Respond

Our service automatically generates timely and meaningful alerts based on your infrastructure requirements. Your IT team no longer needs to undergo the arduous process of defining custom rules, queries or reports. Our analysts give your internal team collected logs and reports to help them evaluate any events and manage remediation for any attacks.