Malware Detection
Identify malware and ransomware activity by correlating endpoint and network events.
⌘K
SolarWinds Partner · Costa Rica and Mexico
Threat Detection with Security Event Manager
Complete SIEM combining log management, threat detection, and automated response to protect your infrastructure in real-time.
700+
Correlation Rules
100+
Log Connectors
<1min
Detection Time
24/7
Continuous Monitoring
What Is It
Threat Detection
Automated process to detect, analyze, and respond to security threats in your infrastructure.
Protect your organization against the most common threats with automated detection and response.
- Active Directory and LDAP
- Firewalls and VPN
- EDR and antivirus
- Databases
- Cloud services
- Operating systems
Key Features
Security Use Cases
Insider Threats
Detect suspicious behavior from internal users with access and activity analysis.
Phishing Attacks
Identify phishing attempts and credential compromise with email event correlation.
Unauthorized Access
Detect unauthorized access attempts to critical systems and sensitive data.
Data Exfiltration
Identify suspicious data transfers outside the corporate network.
Cloud Attacks
Monitor and protect resources in AWS, Azure, and other cloud environments.
Implementation
How we take it to production
A proven process — inventory, baseline, thresholds and handover — with a single accountable team in Costa Rica and Mexico.
1
Collection
Collect logs from firewalls, servers, applications, and network devices in real-time.
2
Normalization
Normalize and enrich log data to facilitate correlation and analysis.
3
Correlation
Apply correlation rules to identify attack patterns and anomalous behaviors.
4
Response
Execute automatic actions like blocking IPs, disabling users, or generating alerts.
Use Cases
Ready-to-run responses
User lockout
Disable compromised accounts in seconds.
Endpoint isolation
Fast containment to stop lateral movement.
SOC alerting
Notify and escalate with full context.
- Security Event Management 2.4M
- Real-Time Monitoring 168
- Sources 148
- Playbooks 42
- Continuous improvement of security posture. 87%
- Automate key actions during incidents. 9
Regulatory Compliance
Generate automated reports to comply with major security regulations.
PCI-DSS
Compliance with payment card data security standards.
HIPAA
Protection of health information according to HIPAA regulations.
GDPR
Compliance with the EU General Data Protection Regulation.
SOX
Audit and access control for Sarbanes-Oxley compliance.
Response cycle
From event to action with complete visibility.
Detect
Real-time correlation and alert prioritization.
Investigate
Full context with timelines and evidence.
Respond
Automated actions and documented closure.
Outcomes
Expected outcomes
99%
Critical log coverage
15min
Average response time
500+
Rules and correlations available
Ecosystem
Priority log coverage
Centralize critical events without complexity.
CiscoFortinetVMwareMicrosoft WindowsMicrosoft SQL ServerMicrosoft AzureAWSOracle
Related SolarWinds products
Commercial coverage in Costa Rica and Mexico
We serve companies with local contact, remote or onsite delivery, and the same service standard in both countries.
Costa Rica
In Costa Rica, TUTARI implements SolarWinds SEM to centralise logs and correlate security events from servers, applications, firewalls and network devices. Scope includes source onboarding, correlation rules, alerting and compliance dashboards.
Request assessmentMexico
In México, TUTARI uses SEM on log management and compliance projects, with defined retention and forensic searches over the history. Scope covers source normalisation, detection rules and escalation to the customer's security team.
Request assessmentTUTARI as a SolarWinds SEM partner in Costa Rica and Mexico
TUTARI S.A. — SolarWinds Partner
SolarWinds Security Event Manager (SEM) is a SIEM that collects, normalises and correlates logs from servers, applications, firewalls and network devices, and produces security alerts and compliance reports. TUTARI sells and implements SEM in Costa Rica and México.
TUTARI's SEM project onboards log sources, normalises events, enables correlation rules per use case, defines retention and configures alerts and compliance reports. The installation is on premises, on Windows or Linux servers with their own database.
SEM can run autonomously or integrate with TUTARI's 24/7 SOC, so correlated alerts escalate to analysts around the clock. Local support is delivered in Spanish from Costa Rica and México.
Frequently asked questions about SolarWinds Security Event Manager
Answers to the most common questions about our services
Request Information
How is Security Event Manager licensed?
SEM is licensed by events per second and by the number of connected log sources. TUTARI estimates EPS from the customer's firewall, server and application logs before proposing the licence tier and required storage.
How long are logs retained in SEM?
Retention depends on the regulatory framework applicable to each customer; financial and healthcare projects often require twelve to twenty-four months online. TUTARI calculates the storage required from EPS and agrees the period and archiving policies with the customer.
How long does a SEM deployment take?
Onboarding the main sources, normalising events, enabling the first correlation rules and delivering compliance dashboards usually takes three to six weeks, depending on source count and daily event volume.
Can TUTARI operate SEM on our behalf?
SEM can be operated by the customer's IT team through alerts and reports, or operated by TUTARI's 24/7 SOC, which takes on alert triage and escalation. TUTARI delivers training and runbooks under either model.
Protect Your Infrastructure
Discover how Security Event Manager can improve your organization's security posture.
