Compares your network records against known warning signs, to find out if you’ve already been breached.
FortiAnalyzer compares logs with FortiGuard’s indicator list and rescans history when new indicators arrive.
Administrators want to know whether a device on any network has already been compromised, including inmate-accessible devices.
- Finds hidden compromises.
- Looks back through past logs.
- Gives a clear starting point.
- Automatic log matching.
- Historical rescanning.
- Prioritized results.
| Control | Priority | How this helps |
|---|---|---|
| SI-4System Monitoring | P1 | Detects signs of compromise. |
| AU-6Audit Record Review, Analysis, and Reporting | P2* | Supports log review. |
| SI-5Security Alerts, Advisories, and Directives | P2* | Applies threat advisories. |
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table