Cisco Cyber Vision is a two-tier monitoring platform made up of sensors and central data visualization and analytics software. It enables organizations to perform OT monitoring: asset tracking, control system integrity and cybersecurity. Cisco Cyber Vision provides full situational awareness, advanced anomaly detection and incident response core capabilities.

The Cisco Cyber Vision QRadar application enables SOC teams to include Operational Technology networks in their security monitoring posture, including detection of targeted attacks, vulnerabilities and industrial malware. By using Cisco Cyber Vision, security analysts can now leverage QRadar to manage security events across their organizational industrial environments and to detect threats or attacks based on both IT and OT environments.

The Cisco Cyber Vision QRadar application provides a dedicated dashboard and search analysis to identify anomalous behavior on the Operational Technology infrastructure. The analysis is based on Cisco Cyber Vision Center log messages, all fields are normalized, and custom analysis and correlation rules can easily be added. By default, the application provides search analysis based on anomalous activities, vulnerabilities, protocol violations, operational anomalies and industrial process modifications.