Eagle SIEM Secure
The firewall in front of the SIEM, and the sensor's only way in.
Eagle SIEM SecureListens to the industrial network, and never transmits into it
A passive sensor for the networks that run a plant, and a collector for the logs of the systems around them. It decodes the protocols the plant speaks and reports what it sees, through Eagle SIEM Secure, to Eagle SIEM.
What it does
Sees the plant. Touches nothing.
In an industrial network the first rule is to do no harm. A controller that has run for fifteen years must never be surprised by a packet it did not expect.
- Passive by construction. The sensor listens on a mirror port or a network tap. It sends nothing into the OT network, and there is no command channel that could make it.
- It speaks the plant's protocols. Modbus/TCP, DNP3, S7comm, EtherNet/IP and CIP, OPC UA, PROFINET, BACnet and more, decoded with Zeek and the industrial protocol analysers published by CISA.
- An inventory from the traffic. What is on the network, what it is, and who it talks to, learned by listening and without one scan.
- A baseline, then what is new. After fourteen days of learning what is normal, the unusual stands out: a new device, a new conversation, a command nobody has sent before.
- The logs around the plant. A collector takes syslog and Windows Event Forwarding from the engineering stations and servers that surround the controllers.
- Nothing lost when the line is down. Thirty days are kept on the sensor and forwarded when the connection returns.
- One-way where it must be. A one-way mode for sites that separate OT from IT with a data diode.
- Searched beside everything else. Events arrive in Eagle SIEM, where the plant is hunted in KQL next to the servers and the cloud.
In the suite
From the plant to the SOC
Eagle SIEM
Where the events from the plant are stored, searched and matched against detections.
Eagle SIEMEagle SOC
Where an analyst works the incident, with the clock running.
Eagle SOC
Eagle SecOps Suite
One part of one system
Eagle OT Sensor is part of the Eagle SecOps Suite: governance, detection, monitoring, vulnerability scanning and secure DNS, built by one team to work as one.
Talk to us about Eagle OT Sensor
An hour with the people who built it, on a real system, with your questions. No slideware.