Solution

Microsoft 365 Defender portal

Microsoft 365 Defender portal

Defender

https://security.microsoft.com/

Where it is used
Infrabel
Open source
No
Railway specific
No
Niche product
No
Easy to install
No
The Microsoft 365 Defender portal combines protection, detection, investigation, and response to email, collaboration, identity, device, and cloud app threats, in a central place.

Features

signature based

Benefits

gathers in one place all the alerts of end-points... allows you to list the softwares installed on the EPs/assets allows you to know the vulnerabilities ofthe installed softwares (ranking) and exposed machines (anti-virus)

Challenges

To be integrated into the SOC

Proof of concept

No

Proof of concept goal

No