Documentation Center
AlienVault® USM Anywhere™

Rules Management

Every networked environment generates thousands of logs from assorted systems. AlienVault USM Anywhere allows you to manage those logs and, through the use of rules, allows you to prevent and frustrate attacks. The management of the different USM Anywhere rules helps you to make the most of your environment.

Keep in mind that setting up a rule base is an iterative process. That means it happens relatively slowly and needs to be tuned over a period of time. There are always new attacks and new indicators to monitor.

USM Anywhere includes the following rules