Realm.Security Rolls Out AI-Ready Security Data for the Modern SOC Ahead of RSA Conference
嗯，用户让我用中文总结一下这篇文章的内容，控制在100字以内，而且不需要特定的开头。首先，我需要仔细阅读文章，抓住主要信息。 文章讲的是Realm Data Enrichments，它在安全数据管道中注入上下文智能。传统的安全分析师需要手动查找或构建工作流来确定可疑活动的来源，这样会浪费时间。Realm通过在数据到达下游系统之前添加上下文元数据来消除延迟。 具体例子包括IP地址自动丰富地理信息、ISP所有权和网络情报，或者标记威胁情报以提前检测。这加快了人类分析师和AI驱动的SOC代理的威胁调查速度。 此外，Realm与Hydrolix合作，将丰富后的 telemetry 数据引入现代安全数据湖，用于大规模调查和长期威胁狩猎。联合解决方案提供高性能、AI准备的数据结构，结合Realm和Hydrolix的技术，帮助组织解锁存档数据，现代化安全管道，并提供SOC所需的亚秒级可见性。 关键好处包括加速调查、减少计算成本和一致的数据架构。还有隐私保护措施。 总结时要简明扼要：介绍Realm的功能、如何丰富数据、带来的好处以及合作伙伴关系。确保不超过100字。 </think> 文章介绍了Realm Data Enrichments如何通过实时注入上下文智能到安全数据管道中，加速威胁检测与响应。该技术可自动丰富IP地址等日志数据，并与Hydrolix合作提升大规模威胁狩猎能力。其优势包括加快调查速度、降低成本及简化数据分析流程。 2026-3-16 14:27:26 Author: securityboulevard.com(查看原文) 阅读量:4 收藏

Realm Data Enrichments inject contextual intelligence directly into telemetry as it flows through the security data pipeline. Security analysts are forced to perform manual lookups or build enrichment workflows inside SIEM or data lake environments to determine the source of suspicious activity. Realm eliminates that delay by augmenting logs with contextual metadata before the data reaches downstream systems.

For example, IP addresses can automatically be enriched with geographic location, ISP ownership, and network intelligence using datasets from providers such as MaxMind and IPinfo. Or an IP could be marked with threat intelligence and deliver a detection before it is queried and indexed by the SIEM to streamline detection triage. This enables both human analysts and AI-driven SOC agents to investigate threats more quickly and accurately.

Furthermore, this enriched data expands Realm’s partnership with Hydrolix, which enables this enriched telemetry to flow into modern security data lakes designed for large-scale investigation and long-term threat hunting. The joint solution provides a high-performance, AI-ready data fabric. By combining Realm’s intelligent security data engine with Hydrolix’s high-velocity real-time, global scale data platform, organizations can unlock their archival data, modernize their security telemetry pipeline, and provide the sub-second visibility required for the SOC in modern defense.

“Teaming with Realm.Security was a natural response to what our mutual customers are telling us,” said Rob Malnati, Head of Corporate Development at Hydrolix. “As enterprises disaggregate their SIEM, they need solutions that solve the two defining challenges of AI-ready security data: retaining the vast telemetry required to train and inform agents, while keeping storage and data management costs in check. Together, we address both — and we go further. SOC responders no longer have to chase root causes across siloed systems and dashboards. We deliver one view with actionable insights in seconds, so security teams can move from detection to mitigation at the speed threats demand.”

Key benefits of Realm Data Enrichments:

  • Accelerated investigations: Analysts can immediately understand where an event originated and who owns the infrastructure involved.
  • Reduced compute costs: Enriching data once in the pipeline eliminates repeated lookup queries and JOIN operations in SIEM or data lake environments.
  • Consistent data schemas: Enrichment data is appended in standardized formats, simplifying cross-tool analytics and dashboards.

    • Unlocking Restricted Data with Privacy Guard


    文章来源: https://securityboulevard.com/2026/03/realm-security-rolls-out-ai-ready-security-data-for-the-modern-soc-ahead-of-rsa-conference/
    如有侵权请联系:admin#unsafe.sh