CyberCommand

A pleasant day to everyone. Is the cyber command better than SIEM? Also is the Cyber Command can get logs from different vendors?

SIEM is based solely on events from system and application logs.  But if there is no log then there is no event.

Sangfor Cyber Command defines the category of enterprise-level prevention, detection, and response that integrates event, endpoint, and network data to stop sophisticated attacks.  

But I think you can't integrate it to other solutions because it only correlates in NGAF, IAG, Endpoint Secure, and Neural-X (including cloud sandboxing). You can check more information to: https://www.sangfor.com/blog/cyb ... m-and-cyber-command

very nice post

good share

SIEM is hard to maintain and it uses large storage capacity unlike Cyber Command

Sangfor Cyber command has the complete suite of monitoring and the SIEM is only part of it. Yes, using Cyber command it can get the other logs of 3rd party devices too.

Sangfor CC, is considered a SIEM. Hence, sangfor has a different approach.

Like integrate all your Sangfor products (EDR, AC, STA, SSL VPN, FTA, AF) to Sangfor CC.
From there, Sangfor CC will handle all the events.

Though, Sangfor CC only works on same brands.

Cyber Command is better than SIEM.

Cyber Command is superior to SIEM.

SIEM disadvantage if it doesn't have sources of logs.