Tripwire System State Intelligence
Provides leading indicators of breach activity
Overview:
System State Intelligence (SSI) is the integration of the overwhelming and disjointed information from siloed security controls, which adds context to security events and decreases the time and effort required to identify and respond to security incidents.
SSI provides leading indicators of breach activity by being aware of the state of your systems—how they’re configured and whether they’re configured according to your policy. Once you’ve achieved a known and trusted state, SSI continuously monitors for changes and deviations from your baseline. It detects suspicious events and enables security context and prioritization.
SSI adds immense value to virtually every security solution you have in place. When integrated with SIEM products, it provides a better starting point for incident detection and analysis by reducing false positives and making it less likely to miss a critical security breach.