Q-Audit by Qmulos leverages advanced analytics to detect risks, attacks, anomalies, and outliers. It integrates with any cybersecurity tool, app, device, or platform and can be deployed on-premise or in the cloud for auditing. Using real-time data, Q-Audit drives analytics and alerts for event families defined in ICS 500-27. The data populates visuals with trends and drill-downs to monitor auditable events and sources. Q-Audit maps vendor-specific event codes to the audit policy, showing what to log and how to monitor those logs in real time. It leverages machine data, insider threat analytics, and dynamic alerting for immediate feedback on anomalies. Security, risk, and compliance managers can use the visualization to drive risk decisions and reduction actions in near real-time. Q-Audit enhances log management by showing what to log, monitoring logs, and sending real-time alerts. It enables monitoring of user and device activity across various operating systems, ensuring compliance with audit controls. Q-Audit provides out-of-the-box compliance for ICS 500-27, NIST, and FedRAMP audit controls. It uses the intelligence community’s gold standard for mitigating insider threats (ICS) 500-27, along with NIST, DoD, NISPOM, and commercial audit best practices. The risk rating algorithms assign users and hosts risk scores, highlighting possible insider and outsider threats to high-value assets and users. The User and Host Investigation capabilities enable deeper dives on highlighted suspicious activities. Q-Audit integrates with Q-Ticket, another Qmulos Splunk application, allowing users to create and track service tickets to investigate risky users and hosts.
