Cybereason XDR Modules
Note
To use these features, you can add the XDR package to your instance of the Cybereason platform for an additional cost. Contact your Customer Success Manager for details about this package.
Cybereason XDR includes four distinct modules to give you greater visibility into different areas of your organization. The modules are different types or categories of integrations, divided by function:
Module |
Description |
Value |
|---|---|---|
Identity |
Products and vendors related to identity management, identity providers, or access providers, such as Okta, Azure AD, Duo MFA, etc. |
Collect and analyze data related to identities of users within your organization and correlated this data with other activities you have found. |
Cloud |
Common cloud storage and cloud access platforms such as AWS and GCP. |
Collect data from cloud platforms to give you greater visibility into activities on your cloud networks. |
Workspace |
Products and vendors that help with company applications and access, sushc as Google Workspace, Microsoft 365, etc. |
Collect and analyze data from common workspace/email platforms around activities and events on these platforms to correlate this data with other activities in your organization. |
Network |
Products and vendors that help manage or limit access to your company’s network through such tools as firewalls, including Fortinet Fortigate, Palo Alto Firewall, Check Point Firewall, etc. |
Collect and analyze events from different parts of your network to correlate this data with other activities you have found. |
These four modules enable you to select and add integrations in common areas of your organization.
Each module includes a number of available integrations. When you add Cybereason XDR to your Cybereason instance, you select the necessary modules. Once you select your modules, you can add any of the supported integrations for these modules.
You can find the module for any integration in the following places:
In the main Cybereason integrations page, view the module name in the integration block:
In an individual integration page, the module displays in the introductory information:
