This guide describes how to deploy the LogRhythm UEBA Module. It is for LogRhythm administrators who handle the security of their organization’s infrastructure and for anyone installing and configuring the SIEM.
This module includes:
- 71 AI Engine Rules
- 17 Lists
The deployment of this module assumes the following:
- The overall LogRhythm deployment is in a fully developed state and is healthy.
- The LogRhythm version is 7.3.1 or higher.
- The TrueIdentity the feature is fully configured.
- LogRhythm’s UEBA feature is fully configured and integrated with your on-premises LogRhythm deployment.
Overview of Steps
This guide is divided into the following sections: