Host Baseline Probe

TiScanner Baseline Probe

Professional high integration security baseline probes that quickly implement HIDS/EDR for mainstream data analysis platforms

The host security baseline is the basic data capability for building HIDS/EDR products and host management functions, while TiScanner integrated with TiCenter can quickly customize HIDS related functions for users; At the same time, TiScanner's data openness can also enable SOC platforms using ELK/OpenSearch/Split/Raylog to have the same HIDS customization capabilities.

1. Enterprise-level probe management capabilities

TiScanner has been preset in the initialization program, but at the same time, it also supports users to issue commands through the RESTful to customize the collection of host baseline information of up to 12 major categories and 80 minor categories. And can set the collection frequency, send objects, data encryption and other functions;

2. Integrated packaging with TiFlow Microprobe

TiScanner Probe can be integrated with TiFlow Microprobe, which is not only more convenient in deployment and configuration, but also more conducive to large-scale and efficient deployment. It also greatly enhances data types and practical scenarios. For most cloud/native internal risks, alarms, and accidents, fine-grained analysis can be realized through the data of the two probes;

3. Full compatibility with mainstream SOC

,We can provide users with how to combine TiScanner with mainstream SOC platforms (based on ELK/OpenSearch/Splunk) to realize MITRE ATT & CK-based introductory guidance, and help users realize HIDS capabilities tailored for themselves from shallow to deep.