Working with Pass through Content

Signature-based threat detection always works as a one hit wonder for organisations due to its ease in determining the presence of malicious entities in our network or systems. Bloo captures all the signature-based threats from various security devices like firewall, IPS,Email Gateway, web filter and many more, segregates them based on valuable information like the suspicious origin, targeted host, malicious file, its path, name of the malware and correlates them with different attacks taking place in the organization.

How to work with Pass through Content?

Threat Alert Workbooks are at the core of the 'Pass Through Content' mechanism.

One needs to simply ingest the logs to Bloo and with no manual effort required to write any detection rule, Bloo's pass-through workbooks will ensure seamless inclusion of threat signals with rest of the signals that are generated by Bloo.