Home / Companies / GitHub / Blog / Post Details
Content Deep Dive

Introducing GitHub Advanced Security SIEM integrations for security professionals

Blog post from GitHub

Post Details
Company
Date Published
Author
Daniel Shanahan, Chad Bentz, Alexander De Michieli, Jose Palafox, Laura Paine
Word Count
1,115
Language
English
Hacker News Points
-
Summary

GitHub Advanced Security (GHAS) has expanded its capabilities by integrating with several Security Information and Event Management (SIEM) providers, including Splunk, Microsoft Sentinel, DataDog, Elastic, Sumo Logic, and Panther, to enhance security visibility and management. These integrations allow GHAS data to be exported to external reporting tools, enabling organizations to combine GitHub security alerts with other data sources, like Configuration Management Databases or user directories, for a comprehensive view of security events within the context of business operations. The partnerships facilitate the creation of customized dashboards, powerful queries, and visualizations, helping security teams to quickly identify, prioritize, and remediate vulnerabilities. Each SIEM provider offers specific features; for example, Splunk provides add-ons for data sources, Microsoft Sentinel offers connectors for audit logs, and Datadog provides out-of-the-box dashboards and alerting capabilities. Additionally, these integrations are open source, allowing for community contributions, and are supported by a detailed integration guide for those interested in implementing or enhancing these solutions further.