Devices, systems, and methods for provisioning and updating security information & event management artifacts for multiple tenants

A method of enhancing network security on behalf of a tenant network by autonomously generating and providing an SIEM configuration to the tenant network via a Security Information and Event Management (“SIEM”) provider server, the method comprising:

• displaying, via a graphical user interface, a plurality of widgets, wherein at least one widget of the plurality of widgets is associated with the tenant network;
• autonomously retrieving, via a scripting engine hosted on the SIEM provider server, an SIEM artifact associated with the tenant network from a content repository communicably coupled to the SIEM provider server;
• generating, via the SIEM provider server, a tenant-specific SIEM configuration for the tenant network comprising the SIEM artifact;
• deploying, via the SIEM provider server, the tenant-specific SIEM configuration to the tenant network via a tenant-specific repository communicably coupled to the SIEM provider server;
• continuously monitoring, via the SIEM configuration, the tenant network for security events;
• and
• autonomously taking an action, via the SIEM configuration, to secure the tenant network upon detecting a security event.

A system for enhancing network security, the system comprising:

• a centralized content repository;
• a plurality of tenant-specific repositories;
• a plurality of tenants configured to host a plurality of clients;
• and
• a Security Information, and Event Management (SIEM) provider server communicably coupled to the plurality of tenants, wherein the SIEM provider server comprises a processor, and a memory, wherein the memory is configured to store a managed security service provider (“MSSP”) management platform that, when executed by the processor, causes the processor to:
• provide a graphical user interface displaying a plurality of widgets, wherein each widget of the plurality of widgets is associated with a tenant of the plurality of tenants;
• receive, via the graphical user interface, a user input associated with a target tenant of the plurality of tenants;
• autonomously retrieve an SIEM artifact associated with the target tenant from the content repository;
• generate a tenant-specific SIEM configuration for the target tenant comprising the SIEM artifact, wherein the tenant-specific SIEM configuration is configured to continuously monitor the target tenant for security events and, upon detecting a security event, autonomously take an action to secure the target tenant;
• and
• deploy the tenant-specific SIEM configuration to a tenant-specific repository of the plurality of tenant-specific repositories associated with the target tenant.