LogLocker for Microsoft Sentinel

LogLocker simplifies a complex storage challenge for Sentinel customers - it offers a low-cost, long-term storage solution for business-critical event logs that need to be retained for legal, compliance and reputational needs.

With the ever-increasing volume of data being generated, LogLocker rationalises log data and reduces the cost and complexity of your native log storage.

LogLocker enhances Microsoft Sentinel

LogLocker’s integration with Microsoft Sentinel, Log Analytics and Azure Data Explorer (ADX) enables selected enterprise logs to be filtered, captured, retained and protected. Those logs are then preserved in LogLocker’s secure tamper-proof ledger for long-term immutable preservation.

Unlike traditional archive solutions, LogLocker is based on blockchain technology. By its very nature, this distributed ledger gives you superior redundancy, preservation, security and data lineage capabilities.

Interested and looking for more information about LogLocker? You will find it all here or click the 'Get It Now' button to be contacted by one of our experts.

The business case for LogLocker

• Dramatically reduce long-term preservation costs.
• Simplify your architecture and the storage and preservation of high-value logs.
• Minimise data retained through targeted KQL log collection.
• When you need irrefutable evidence, search features guarantee that logs can be found immediately.
• Enforce data governance.
• Remove archiving limitations for custom tables, data types or retention periods.
• Enrich log management with classification, tagging and versioning.

Who does LogLocker support?

• CIO, CISO, CDO, CRO, Security Operation, Information Security Officers, Compliance and Risk Managers, Records Managers and Legal teams.

Which LogLocker subscription do you need?

• LogLocker Business. For smaller log volumes - retain and manage high-value logs quickly and easily.
• LogLocker Enterprise. All the Business plan features plus off-chain storage for larger log volumes
• LogLocker Premium. All the Business and Enterprise features plus API integration and 3rd party data sharing.

Considering Premium? Please contact us to discuss configuration options before buying.

How customers use LogLocker

1. Tracking document lifecycle. Record events and actions around contracts, intellectual property, and high value files
2. eDiscovery supporting evidence. Record Purview queries to prove eDiscovery collection criteria
3. Cyber disclosure & reporting. Support accurate and immediate disclosure of cyber incidents
4. Privileged access logs. Record and aggregate actions and events by privileged users deterring fraud or malicious behaviour
5. 3rd party trust. Securely allow contractors, partners or regulators to monitor specific events and actions to promote transparency

What do people say about LogLocker?

• "We are able to minimise and select only the logs that we need to archive instead of archiving entire datasets."

• "Reduced our cloud service and support costs to meet our compliance requirements."

• "Provided us a simple alternative to Log Analytics or Azure Data Explorer archiving options."

• "Supports our multiple Sentinel tenants allowing cross tenant log aggregation."

• "Has reinvented our long term log management architecture and given us back control."

Get more information about LogLocker and connect with our team here