McAfee LLC today announced a new cloud-based security and information event management service that offers improved onboarding and related security services for security operations teams.

Called the McAfee Enterprise Security Manager Cloud, the product supports detection, incident response and threat hunting activities that the company says extend the value of traditional SIEM by providing faster onboarding of security telemetry, automatic updates and continuous system health monitoring.

Services provided by the new offering include advanced analytics, both real-time and historical analysis and improved “time to value” through security content packs that include pre-built threat detection rules and fully operational dashboards, reports, watchlists and alarms.

The service offers out-of-the-box coverage of hundreds of data sources across the endpoint, network and cloud-based services and applications along with an open interface that provides integration with both McAfee and third-party solutions for immediate response to threats, the company said. Auto-provisioning in McAfee ESM Cloud is described as allowing event ingestion from day one, minimizing engineering efforts required to deploy and maintain infrastructure.

McAfee is also promising users of the new service new capabilities and enhancements when they become available automatically with no need for users to apply software updates and upgrades.

“Today’s SecOps teams face a multitude of issues, including the need to take on new efforts such as digital transformation, the convergence of internet technology and operation technology, and the sudden shift to remote working,” Anand Ramanathan, vice president of enterprise products at McAfee, said in a statement. “ESM Cloud helps customers tackle these challenges, allowing them to maintain and improve upon their security posture as they progress through their journey of transitioning to the cloud.”

The timing of the product comes as cyberattacks surge during the COVID-19 pandemic. A study from McAfee published in May found that external attacks on cloud accounts had surged 630% through the first months of the pandemic as workers were forced to work from home because of lockdowns.

Image: McAfee