Security management continues to be at the forefront of IT projects. The Microsoft Security solutions enable organizations to obtain enterprise grade security technology for their entire environment, but finding skilled resources to monitor, manage, and respond to indicators of compromise has become harder to find and maintain.

Avertium's Connector for Microsoft Sentinel is designed for companies in the Healthcare, Manufacturing, Retail and Financial industries with less than 3500 employees and limited security resources. Avertium applies our proprietary threat intelligence information to improve detection and hunting capabilities of the Sentinel platform. This additional layer of correlation provides more accurate alerts and detections.

· Custom threat intelligence

· Active threat hunting

· Custom response actions

· Incident management playbooks

· Security incident reports

· Subject matter support in remediation efforts

· Remediation actions taken on customer's behalf (requires Avertium MDR for Microsoft Defender for Endpoint managed service)

Avertium Connector for Microsoft Sentinel utilizes a custom function app within Avertium's XDR Azure tenant to push opensource and proprietary detections and analytics rules for alerting on customer log data. Opensource rules are pushed directly to the customer's Microsoft Sentinel tenant, while Avertium proprietary detections are pushed into Avertium's Microsoft Sentinel tenant and run against customer Sentinel workspaces. New detections created for any Avertium customer are pushed down to all customers for additional protection.