LogRhythm LR1000 XM

LogRhythm’s LR1000 XM system is a powerful log aggregation tool available in hardware or software platforms, although the appliance is the most common deployment and the one we tested. It can collect information off a number of open and closed platforms including Unix system logs, Windows event logs and Cisco logs. Its search capabilities make it a powerful network forensic tool.