CodeOne
Extinelle
What is Extinelle?
Extinelle (Security Event Justification System)
Extinelle is a security event management solution designed to automatically collect, analyze, and process internal security events occurring in SIEM solutions.
By managing various events that occur within an organization on a single platform, it provides improved control efficiency, improved security response speed, and automation of the user explanation process.
Main features
1. Automatic collection of internal security events
•Selectively links only internal events that occurred in existing SIEM
•Maximize control efficiency by filtering unnecessary external events
•Automatically generate real-time tickets when an event occurs
2.Ticket-based event management
•Automatic ticketing when an event occurs
•Controller performs detailed analysis of events based on tickets
•Event status (in progress / request for explanation / closed, etc.) can be systematically managed
3. User explanation request process
•The controller can request an explanation from the user (e-mail will be sent when an explanation is requested)
•Users click on the email URL, log in to SSO, and easily enter their name.
4. Immediate termination of false positives
•If the controller determines the event to be a false positive, termination can be selectively processed in one of two ways.
•Shutdown on the web: Handle shutdown only on the web while preserving SIEM original events
•SIEM termination: SIEM source event is also terminated at the same time as web termination processing
•The termination method can be selected as needed, enabling flexible response tailored to control policy and operational flow.
•Reduce unnecessary work consumption and improve security event processing accuracy
5. Supports SSO linkage and email server linkage
•Provides a convenient login experience by linking with companies
•Minimize the need for separate account management
•Provides convenience by linking with email
Provides web-based interface
대시보드 정보 확인 가능
부서 / 이름 / 이메일 자동 지정