How do you or your organization use this solution?
Please share with us so that your peers can learn from your experiences.
We use this solution for correlation, alerting, and log management. We are integrators.
We are using this solution primarily for SIEM logs.
We use it for malware detection and authentication or login failures.
We implement it in our hospital applications.
I work with an integration company and implement tools such as McAfee ESM. We are an MSSP for a lot of clients. We gather their logs, correlate them, create rules, and assume the role of their SOC. We have skilled operators 24/7 who take care of these clients.
We are using the solution for log analyzing endpoints and investigating all types of applications, files or network devices login collection.
We use McAfee ESM for IT operations and a few security-related things.
We are a service provider and we implement it for our customers, as well as use it internally. This is a SIEM product that makes up part of our overall security solution.
We use this solution to provide managed security services. We use loggers at the client site to generate logs for monitoring their devices. We handle the monitoring, administration, and troubleshooting of their endpoints. For some customers, we manage everything, while for other customers we only monitor their critical devices. We are using an on-premises deployment model.
We use this solution to monitor everything in our hybrid-cloud environment. This includes IoT devices and a couple of data centers.
My primary use case for this solution is to secure the data on my laptop.
As a bank, we have different cases use cases that are typical for the industry.
It has performed well and delivered the results that I have been looking for.
We all know it's really hard to get good pricing and cost information.
Please share what you can so you can help your peers.