Security event transformation and logging systems and methods
AssigneeWebroot Inc.
InventorsNiyazi Eray Goknel, Paul Fellner, Johannes Mayr, Aqil Ahmed
Life of this patent
Estimating the term…
Abstract
Embodiments provide systems and methods for logging events. A computer-implemented method comprises receiving input for selecting one or more event types to receive from an event collector, receiving, based on the one or more event types, a plurality of security events from the event collector, transforming each of the plurality of security events to a standard format to generate a plurality of formatted security events and transmitting the plurality of formatted security events to a security information and event management (SIEM) server.
Claims20
A system for security event transformation, comprising:
- a processor;
- a non-transitory computer-readable medium;
- and
- stored instructions translatable by the processor for executing:
- a security event transformer for receiving a plurality of security events, the security event transformer transforming each of the plurality of security events to a standard format to generate a plurality of formatted security events;
- a security event receiver for receiving the plurality of security events from an event collector, coupled to the security event transformer, the security event receiver forwarding the plurality of security events to the security event transformer;
- and
- a security event transmitter, coupled to the security event transformer for receiving the plurality of formatted security events from the security event transformer and transmitting the plurality of formatted security events to a security information and event management (SIEM) server, the security event receiver further receiving input for selecting one or more event types to receive from the event collector.
A method for security event transformation, comprising:
- receiving input for selecting one or more event types to receive from an event collector;
- receiving, based on the one or more event types, a plurality of security events from the event collector;
- transforming each of the plurality of security events to a standard format to generate a plurality of formatted security events;
- and
- transmitting the plurality of formatted security events to a security information and event management (SIEM) server.
A computer program product comprising a non-transitory computer-readable medium storing instructions translatable by a processor for:
- receiving input for selecting one or more event types to receive from an event collector;
- receiving, based on the one or more event types, a plurality of security events from the event collector;
- transforming each of the plurality of security events to a standard format to generate a plurality of formatted security events;
- and
- transmitting the plurality of formatted security events to a security information and event management (SIEM) server.
Dependencies are inferred from the claim text.