McAfee ESM

摘要

We have two SIEMs in the Labs and we use them slightly differently. The McAfee ESM is our workhorse. We use version 10 and we really like the new html5 user interface. This SIEM started life as the NitroView and it was, at that time, unquestionably the best analyst's SIEM available. Today, the product has undergone many changes, all of them very positive from our perspective. Perhaps the most important change is its personality. It has become far more user-friendly.