Softprom Solutions MapNetWitness through Softprom
Distributor
NetWitness is a complete operations stack from one vendor, assembled around full packet capture rather than around logs. The pieces: log collection parsed at the moment of capture; network detection that keeps the packets so a session can be replayed instead of inferred; endpoint recording with the ability to kill, isolate and quarantine; behaviour analytics; orchestration with playbooks and case handling; passive OT and ICS inventory correlated against IT events; and a discovery service for assets nobody knew existed.
Countries where NetWitness is available through Softprom
- Albania
- Armenia
- Austria
- Azerbaijan
- Bosnia and Herzegovina
- Estonia
- Georgia
- Germany
- Kazakhstan
- Kyrgyzstan
- Latvia
- Lithuania
- Moldova
- Montenegro
- North Macedonia
- Tajikistan
- Turkmenistan
- Ukraine
- Uzbekistan
NetWitness solutions in the Softprom portfolio
| Solution | Category |
|---|---|
| NetWitness EDR (Endpoint)NetWitness EDR records process, file, registry, user and network activity on endpoints and can kill processes, isolate hosts or quarantine files. | Endpoint Detection & ResponseEndpoint Security |
| NetWitness InsightNetWitness Insight is serverless SaaS that passively discovers, classifies and risk-ranks unknown and unmanaged assets via unsupervised machine learning. | Cyber Asset Attack Surface Management (CAASM)Exposure & Vulnerability Management |
| NetWitness NDR (Network Detection and Response)NetWitness NDR captures full packets and enriches network metadata to detect threats and reconstruct sessions for investigation. | Network Detection and Response (NDR)Security Operations |
| NetWitness OT Security (DeepInspect)NetWitness OT Security, powered by DeepInspect, passively inventories OT and ICS assets and detects threats, correlating them with IT events. | Cyber-Physical Systems (CPS) SecurityOT & IoT Security |
| NetWitness SIEM (Logs)NetWitness SIEM collects logs from cloud, SaaS and on-premises sources and parses them at capture time so the SOC can detect and investigate threats. | Security Information and Event Management (SIEM)Security Operations |
| NetWitness SOAR (Orchestrator)NetWitness SOAR normalizes and risk-scores alerts, then runs prebuilt or custom playbooks to enrich, contain and document incidents. | Security Orchestration, Automation & Response (SOAR)Security Operations |
| NetWitness UEBA (Behavior Analytics)NetWitness UEBA applies unsupervised machine learning to logs, packets, endpoint and cloud telemetry to flag risky user and entity behavior. | User and Entity Behavior Analytics (UEBA)Security Operations |