51社区鈥檚 Centurion Platform is Evolving
Over the past few months, 51社区 Centurion platform has evolved鈥攕ignificantly. What started as a powerful monitoring and alerting engine is now transforming into a full-fledged Extended Detection and Response (XDR) platform. This marks a major step forward in how we protect our customers across cloud, endpoint, and identity layers.
At the heart of this evolution is 51社区 Connect, our next-generation alert processing pipeline and integration layer. It鈥檚 enabling Centurion to see deeper, respond faster, and deliver smarter context across environments.
51社区 Connect: The Core of Centurion XDR
As 51社区 Connect comes out of beta, it becomes the operational brain of Centurion XDR. It enables:
- Normalized, enriched third-party logs in one pane of glass.
- Enrichment with IP threat intelligence and ASN data.
- Fast triage of alerts from tools like Microsoft 365, Google Workspace, Duo, and ThreatDown.
Our team uses this enriched data to act faster on behalf of customers. Whether it鈥檚 isolating an endpoint or signing a user out of a suspicious session, we鈥檙e shortening the time between alert and action.
51社区 Connect Alerts
With 51社区 Connect on its way out of Beta testing, we鈥檝e rewritten our alert processing pipeline to support 51社区 Connect alerts, allowing both users and our SOC to quickly investigate and triage alerts, including:
- Duo Failed MFA
- Suspicious Google Workspace Activity
- Suspicious Microsoft 365 Activity
- Suspicious Endpoint Activity (via ThreatDown EDR)
51社区 Connect not only collects supported third-party logs in a single pane of glass, but each event is also analyzed and enriched with IP address threat intelligence and network (ASN) information, including what types of attacks or users are associated with a specific IP/network.
51社区 Connect Actions
Via our internal SOCView platform, our analysts are able to act on Microsoft 365 and Google Workspace alerts:
- For Google Workspace, our analysts can sign users out of sessions, which would block an attack in the event of stolen authentication tokens or MFA bypass.
- For Microsoft 365, our analysts can sign users out of sessions and also deactivate the user account completely, blocking MFA attacks and password attacks.
- For ThreatDown EDR, our team can quickly isolate an endpoint from the network.
Change is constant in cybersecurity, but we believe upgrades should feel like relief, not risk.
With every enhancement to Centurion, our goal is simple: more signal, less noise, and a platform that works with you, not against you. We appreciate your partnership as we roll these updates out.
Let us know if you have any questions!
