Modules

SIEMonster XDR consists of a multitude of modules that performs various functions. Originally a branch of ossec, Wazuh is the industry standard for large scale event collection/correlation and file integrity monitoring for compliance such as PCI DSS. SIEMonster has now forked and rebranded it as SIEMonster XDR.

XDR has the following default classification sections and subsections that can be access to review the information generated by events.

Cloud Security:

• Docker

• Office 365

• Amazon AWS

• Google Cloud

• Github

Endpoint Security

• Configuration Assessment

• Malware Detection/Rootkit Detection

• File Integrity Monitoring (FIM)

Threat Intelligence

• Vulnerabilities

• Mitre ATT&&CK

• Threat Hunting

Security Operations

• PCI DSS

• NIST 800-53

• TSC

• GDPR

• HIPAA

🔖 NOTE: Some modules are functional and populated as soon as events flow into the environment. Others require additional setup.