Allan Gray Expands Detection and Automates Response with Securonix

Allan Gray transformed its SIEM migration into an opportunity to simplify legacy detection, expand behavioral analytics, and automate response across its security operations.

Allan Gray already had strong visibility across its environment. The challenge was building on that foundation while gaining access to broader analytics capabilities and avoiding the complexity of simply recreating years of legacy policies.

With Securonix, Allan Gray migrated from its previous SIEM in less than 45 days and reviewed approximately 250 legacy Splunk policies, identifying about 150 relevant policies for coverage. The team then expanded its detection program with UEBA, Threat Models, MITRE ATT&CK coverage, contextual enrichment, and automated response workflows.

The result is a more focused security operations environment designed around relevant detections and automated response, while giving Allan Gray additional capabilities to continue developing its security program.

Key Results:
  • SIEM migration completed in less than 45 days
  • 81% true detection alerts
  • 90% of incidents covered by SOAR playbook execution
  • 344 UEBA detection policies across eight analytics types
  • 50% increase in cloud and cyber threat detection coverage compared with the previous SIEM