• Votes

    10

    Cyber Ark Collector

    I would like to request a collector for Cyber Ark. I have seen this asked by multiple customers.

  • Votes

    6

    Customer needs the ability to process EVTX files from netapp

    Sentinel should be capable of ingesting evtx files from netapp

  • Votes

    2

    Sentinel should have the capailty to add a tag within the agent ...

    Sentinel should have the capability to add a tag to devices and groups within the agent manager sentinel GUI Currently you can only add a tag in event sources. It would ...

  • Votes

    2

    exclude results in sentinel through the fields area

    it would be great if you could exclude results with a check mark in the refine fields area. instead of selecting what you want to see, you need to have the ability to ...

  • Votes

    3

    Browse to AD objects when creating correlation rule or lists.

    It would be good if we could leverage some of the technology in CG to browse to AD objects when creating correlation rule or lists.

  • Votes

    3

    Add the ID field to the message logs under all information

    I think it would beneficial to take the information from the TIPS area in sentinel and populate it in the details of the logs when you select all. Add the ID tag to the ...

  • Votes

    2

    brocade collector

    Sentinel does not currently have a brocade collector plugin.

  • Planned

    4

    Kaspersky Security Center Collector

    Kaspersky is one of the Top 5 Security Solutions on the market. Collectors for McAfee, Sophos, Symantec, Trend Micro exist, the creation of a Kaspersky Security Center ...

  • Planned

    8

    User behavior analytics(UBA)

    All leading SIEM products provide UBA; its a must feature for any modern-day SIEM. Unavailability of UBA is one of the major reason, competitors take edge in POC demos ...

  • Votes

    2

    Email zipped events in notification when correlation rule hits.

    We need the events to be zipped in mail notification as it becomes easier to analyze events if there are too many events.

  • Votes

    6

    Email zipped events in notification when correlation rule hits.

    We need the events to be zipped in mail notification as it becomes easier to analyze events if there are too many events.

  • Planned

    3

    Meraki Firewall Collector Plugin development

    The Cisco Meraki proprietary packet processing engine analyzes network traffic up to and including layer 7. Cisco Meraki's next generation firewall controls evasive, ...

  • Votes

    10

    make searching for "lateral movement" easier in the WebUI

    I really like the feature of being able clicking on fields to add a new criteria to the search query. When analyzing events, I often need to find similar events and do a ...

  • Votes

    9

    pseudonymization of user identifiers

    Data privacy laws and regulations in certain areas prohibit the use of subject’s real names or identifiers which can easily be attributed to a subject (e.g. account names ...

  • Votes

    2

    Integrate with Serena tools for IT service management

    Companies who handle their ITIL processes using Serena want to do the same for their incident response process. The "Computer Security Incident Response Plan Management" ...

  • Planned

    4

    notification on alert creation or owner change

    there should be an option to notify the owner if an alert is assigned.

  • Votes

    4

    webhelper to interact with REST api from collectors and actions

    If one wants to interact with Sentinel's REST api a https connection need to be established and authenticated. This can be cumbersome from an action or collector and ...

  • Votes

    4

    Add FQDN host fields

    Currently Sentinel splits fully qualified DNS names into a Hostname and the Domain part. That makes it diffucult to use thread intelligence feeds in dynamic lists, as ...

  • Votes

    5

    allow additional links to be added to app navigation bar

    The left nav bar in the Sentinel app currently has links for home, main, search and (at the bottom) security health. This leaves a lot of room that could be used to add ...

  • Votes

    1

    Read SAP Security Audit Log via RSAU_API_GET_ALERTS

    From SAP Note 2191612 - FAQ | Use of Security Audit Log as of SAP NetWeaver 7.50 42. Can recorded events be promptly transferred to a central alert cockpit? The RFC ...