Exabeam and SentinelOne Partner to Detect and Stop Advanced Threats
Joint customers will be able to ingest threat and incident data directly from SentinelOne into the Exabeam Security Management Platform to baseline normal behavior. Through this, customers can combine that data with data from other IT and security solutions to provide security analysts with greater visibility against advanced attacks.
Additionally, Exabeam can trigger automated incident response for compromised endpoints using the Sentinel One API. By gathering all related events into Exabeam Smart Timelines, analysts can automatically reconstruct the events underlying security incidents. The Exabeam Security Management Platform automatically identifies risky, anomalous device activity that may be indicative of a security incident or compromise. Customers can then automatically respond to the incident directly from the Exabeam UI: changing user passwords, sending email verifications, restarting and scanning hosts, getting device and/or user information, and enabling or disabling two-factor authentication. They can also generate and list reports, list processes, get files and list applications on a host.


Sysdig, Inc.