Trellix SIEM

Trellix ESM (Enterprise Security Manager) is the core module of the SIEM solution. ESM and other Trellix SIEM components are easily deployed and made ready for use. Trellix SIEM components can be used as separate machines for each component or as a combo-box on a single machine. With Trellix SIEM, real-time or historical correlations can be performed. With its easy-to-use interface and compact-running components, it tracks all events happening in the environment. It enables the creation of alarms for these events. Additionally, related events are correlated to provide high-level visibility and protection in the environment. Trellix SIEM differentiates itself from other SIEM solutions on the market by leveraging GTI, Trellix's global threat intelligence center, to enable risk-based correlation creation.