Every decision, with its reason
A blocked flow records what matched and why, not just that something was dropped. That difference is the difference between a ticket you can close and one you cannot.
For MSSPs & SOC teams
The detail an investigation needs, in the format your SIEM reads
Per-flow records with the decision, the reason and the classification behind it, exported continuously in the formats your platform already ingests.
What a SOC gets from it
The formats you already ingest
Structured syslog, CEF for Splunk and ArcSight, LEEF for QRadar, and syslog over TLS where the transport has to be protected too.
Multi-customer by construction
Each customer is an organisation with its own gateways, its own operators and its own boundary. An analyst sees the customer they are assigned to.
Demo & pricing: info@zedmos.com
Request a demo