Global and remote settings
Master node configuration
Automatic agent registration service
Logging settings that apply to the agent
Settings related to the connection with the manager
Agent bucket parameters to avoid event flooding
User-defined information about the agent included in alerts
Settings related to the alerts and their format
Slack, VirusTotal and PagerDuty integrations with external APIs
Configuration to ensure compliance with security policies, standards and hardening guides
Configuration assessment and automation of compliance monitoring using SCAP checks
Configuration assessment using CIS scanner and SCAP checks
Discover what applications are affected by well-known vulnerabilities
Expose an operating system as a high-performance relational database
Gather relevant information about system OS, hardware, networking and packages
Active threat addressing by inmmediate response
Active threat addressing by inmmediate response
Configuration options of the Command wodle
Log analysis from text files, Windows events or syslog outputs
Identify changes in content, permissions, ownership, and attributes of files
Run integrity checks on devices such as routers, firewalls and switches
Security events related to Amazon AWS services, collected directly via AWS API