Skip to main content

vast limits GmbH and uberAgent are now part of Citrix, a business unit of Cloud Software Group. Learn more at Citrix.com.

Blog tag: Threat Detection

December 7, 2023

Learn how uberAgent ESA’s Security Score enables help desk engineers to improve endpoint security by detecting insecure configurations and risky activity.
November 30, 2023

We're making exciting improvements to uberAgent ESA’s Threat Detection rules. These upcoming changes increase the rule engine’s performance, enhance the readability of rule queries, and simplify day-to-day operations.
November 15, 2023

In this articleWhat Is Sigma?Sigma Rule ExampleWhy a New Rule Converter?New Converter → New Backend PluginsMany New RulesRelease Status of uberAgent's Sigma Backend PluginConclusion We're thrilled to unveil the second generation of our Sigma to uberAgent…
June 12, 2023

File system activity monitoring is uberAgent ESA’s capability to detect changes to objects in the file system. The monitored object types include files, of course, but also named pipes.
March 2, 2022

We’re happy to announce the public release of uAQL Studio, our new free online tool to learn, build and test uberAgent ESA Threat Detection rules.
December 1, 2021

We’re excited to announce that the Sysmon to uberAgent ESA rule converter tool is available. The converter translates Sysmon rules into the format used by uberAgent ESA.
November 17, 2021

We are happy to announce the newest version of our user experience monitoring & endpoint security analytics product. uberAgent 6.2 introduces the persistent output queue, which guarantees that no events are lost in transit, and comes…
December 15, 2020

uberAgent ESA, our endpoint security analytics product, comes with a powerful Threat Detection Engine (TDE). TDE makes use of rules to describe unwanted/risky/dangerous behavior that should be flagged. A TDE rule consists of multiple components, the…