QRadar v.7.0 boosts visibility of staff social media usage
Q1 Labs has added the ability to monitor activity on social media sites such as Twitter, Facebook, and LinkedIn, in the latest version of its security information and event management (SIEM) product.
The new version offers social media access monitoring and correlation: the ability to monitor the usage of social media websites from within an enterprise network. This includes identifying which users are accessing which social networks, determine usage volume and pattern, and giving IT administrators the ability to inspect and alert on the content being transmitted to those services.
Social media usage can also be correlated against other network and log activity within an enterprise – for example, the transmission of data to a social media site immediately following the user accessing a sensitive internal resource.
User and application anomaly detection features enables the detection of anomalous behavior of both network and application usage by specific users. ‘Excessive’ or ‘out-of-profile’ behaviour can be detected, along with out-of-hours or excessive usage of an application or Cloud-based service, or network activity patterns which are inconsistent with a system’s or user’s profile.