Auguria enhances SKL platform with new integrations

Auguria has announced enhancements to its Security Knowledge Layer (SKL) Platform, now featuring new integrations with large data sources such as SentinelOne, CrowdStrike, Palo Alto Networks, and Microsoft, alongside the introduction of the Explainability Graph.

The augmented platform is designed to help security operations teams manage the overwhelming volume of data signals, which average 78 trillion per day, by integrating seamlessly with notable data sources to enrich insights and streamline operations.

Integration with SentinelOne's Singularity platform provides advanced enrichment and alert correlation which aims to reduce alert fatigue and enhance security operations efficiency. CrowdStrike Falcon's platform is supported for AI-driven prioritisation and incident response that is both faster and more accurate.

The inclusion of Palo Alto Networks offers world-class firewall and network telemetry, enhancing data with contextual intelligence and prioritisation to facilitate quicker incident investigations. Meanwhile, Microsoft Windows Event Logs are transformed from voluminous amounts of data into actionable insights through intelligent noise reduction and data enrichment.

Auguria's Explainability Graph is introduced as a feature that visualises threat data in a context-rich map of anomalous activity. This allows security teams to uncover root causes of unusual behaviours, identify connections between isolated events, and confidently act on insights to address threats swiftly.

Chris Coulter, CTO and Co-founder at Auguria, stated, "Our latest integrations and Explainability Graph reinforce Auguria's mission to simplify security operations while amplifying outcomes. By supporting industry leaders like CrowdStrike, Palo Alto Networks, Microsoft and SentinelOne and innovating with tools like our Explainability Graph, we're giving organisations the clarity and precision they need to succeed in today's complex threat landscape without being overwhelmed by noise."

The updated platform offers several benefits to security operations teams. These include cost efficiency through reduced SIEM and data storage expenses, noise-free insights by automatically filtering up to 99% of non-actionable data, and faster investigations thanks to enriched and prioritised data which accelerates response times. Additionally, the platform supports proactive threat hunting via AI-driven anomaly detection and provides customisable outputs for exporting enriched data to various security tools.

The changes announced by Auguria highlight a significant leap towards equipping security teams with tools to manage and make sense of intricate streams of log events, ultimately aimed at countering rising threats with minimal disruption.