EMET malicious user journey analytics for SAP powered by Reveal Security is a leading security analytics tool that uses user journey analytics to detect threats and fraud at the application layer. It provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. This results in higher quality alerts that help security analysts reduce wasted time on false positives.
EMET malicious user journey analytics for SAP powered by Reveal Security is a leading security analytics tool that uses user journey analytics to detect malicious activity for SAP.
The solution provides the following benefits:
User Journey Analytics: User Journey Analytics is based on the analysis of activity sequences performed while using an application, in contrast with UEBA, which analyzes each activity individually and then builds a timeline. The sequence provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. Higher quality alerts mean security analysts reduce wasted time on false positives and alert for cases other products fail to notice.
Multiple Journey Profiles per User: Leveraging RevealSecurity's patented clustering engine - tailored for clustering user journeys - TrackerIQ automatically learns multiple journey profiles across applications. Detecting anomalous journeys by comparing users to themselves and their peers provides an extremely high signal-to-noise ratio.
Application Layer Detection and Response: TrackerIQ complements XDR solutions at the business application layer to detect threats and fraud. Existing detection solutions are focused on the infrastructure layers and on access to business applications, resulting in very limited effectiveness against malicious insiders as well as external attackers who succeed to bypass authentication mechanisms.
Application Agnostic Detection: The detection model is applied to any SaaS or custom-built application, analyzing user journeys in and across applications to detect anomalies. This model eliminates the need to understand business application logic and no rules are required.
For Splunk customers, TrackerIQ connects natively to Splunk, offering simpler, streamlined deployment. EMET's Splunk experts will assist Splunk customers to configure and connect their Splunk and TrackerIQ deployments for an easy deployment experience.
The product pricing includes up to 1 million log records processed per month. For more than 1 million log records processed per month, please ask for a private pricing proposal.
Highlights
Application User Journey Analytics - User Journey Analytics is based on the analysis of activity sequences performed while using an application, in contrast with UEBA, which analyzes each activity on its own and then builds a timeline. The sequence provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. Higher quality alerts means security analysts reduce wasted time on false positives and alert on previously undetected cases.
Multiple Journey Profiles per User - Leveraging RevealSecurity's patented clustering engine - tailored for clustering user journeys - TrackerIQ automatically learns multiple journey profiles per user across applications. Detecting anomalous journeys by comparing users to themselves and their peers provides an extremely high signal-to-noise ratio.
Application Layer Detection and Response - TrackerIQ complements XDR solutions at the business application layer to detect threats and fraud. Existing detection solutions are focused on the infrastructure layers and on access to business applications, resulting in very limited effectiveness against malicious insiders as well as external attackers who succeed to bypass authentication mechanisms.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You pay by the hour for the EC2 instance size you run this software on. All five options bill on the same usage-based model, differing only by compute capacity. The m5.xlarge and t2.xlarge give you smaller footprints. The m5.2xlarge and c4.2xlarge step up in resources. The m5.4xlarge provides the largest configuration listed. Pricing scales with the instance you select, so you match compute to your workload. Your total cost rises with instance size and the number of hours you run it. There are no upfront commitments in this model.
Top-of-mind questions for buyers
What does one billing unit represent in this hourly pricing model?
Each unit is one hour that a chosen EC2 instance runs the software. You are billed per instance-hour for the size you select, such as m5.xlarge or c4.2xlarge. Larger instances carry a higher hourly rate. Metering counts the running time of each active instance.
Am I charged when an instance is stopped or paused?
Software charges apply only while the instance runs. A stopped or terminated instance stops accruing software fees. Note that stopped instances may still incur underlying AWS storage costs for attached volumes, but the software licence meters running hours only.
What does this software do while it runs on the instance I select?
It analyzes user journey behavior in SAP environments to detect malicious or risky activity. The software observes identity behavior, scores events, and flags anomalies. The instance size you choose provides the compute for this analysis, so heavier monitoring workloads may need a larger instance.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Level up your Terraform game! Control Monkey is an end-to-end SaaS platform that helps discover, manage, automate, and scale your cloud environments, leveraging Infrastructure as Code, now offered with a daily checkup service.
EMET malicious user journey analytics powered by Reveal Security is a leading security analytics tool that uses user journey analytics to detect threats and fraud at the application layer. It provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. This results in higher-quality alerts that help security analysts reduce wasted time on false positives. This is the "custom application edition" of the product.
EMET malicious user journey analytics powered by Reveal Security is a leading security analytics tool that uses user journey analytics to detect threats and fraud at the application layer. It provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. This results in higher quality alerts that help security analysts reduce wasted time on false positives. This Edition supports MS365, Salesforce, OKTA, AWS, AZURE, Dynamics 365 (other SaaS applications are to be discussed separately)
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.