NRI Secure Adds 'CrowdStrike Falcon® Next-Gen SIEM' to Its SIEM Monitoring Service

NRI Secure Technologies, Ltd. (hereinafter, NRI Secure) announces the addition of CrowdStrike Inc.'s 'CrowdStrike Falcon® Next-Gen SIEM' (hereinafter, Next-Gen SIEM) to its 'SIEM Monitoring Service,' which provides 24/7 security log monitoring for enterprise SIEM (Security Information and Event Management) solutions. The expanded service will launch on August 1, 2026. This service is offered to organizations utilizing the 'Managed EDR Service,' a next-generation endpoint security monitoring, investigation, and response solution.

Background: The Growing Need for Integrated Log Monitoring

In recent years, cyberattacks have become increasingly sophisticated, shortening the time between system intrusion and damage escalation (known as 'breakout time'). As a result, rapid detection, decision-making, and response during security incidents have become more critical than ever. In response, the need for 'integrated log monitoring'—collecting and analyzing logs across various devices and services such as endpoints (EDR), identity, network, and cloud—is growing to enable comprehensive system-wide surveillance.

Overview and Key Features of the SIEM Monitoring Service with Next-Gen SIEM

Next-Gen SIEM is a cloud-based security operations platform that consolidates endpoint, cloud, and various security logs, centralizing threat detection, analysis, and response. Leveraging advanced AI and analytical capabilities, it enables real-time threat visualization. In this service, NRI Secure’s security log monitoring service 'NeoSOC' analysts utilize Next-Gen SIEM’s data integration and analysis functions to conduct 24/7 monitoring based on logs collected from multiple systems. This supports enterprises and organizations in reducing security operation burdens and accelerating incident response.

Figure: Service Delivery Concept

The main features of this service are as follows:

1. Advanced Security Log Monitoring with AI Agents

NeoSOC analysts investigate and analyze alerts generated by Next-Gen SIEM. When threats are confirmed, they respond 24/7 with actions such as network isolation of affected endpoints or adjustment of detection rules to prevent damage expansion. These responses leverage NRI Secure’s proprietary monitoring and analysis platform, which incorporates in-house developed AI agents, enabling faster analysis and improved accuracy.

2. Integrated Log Monitoring Including Third-Party Product Logs

In addition to CrowdStrike products, logs from diverse systems—including SaaS and on-premises network devices—are aggregated into Next-Gen SIEM for unified monitoring. Furthermore, this service supports integration not only with SASE products natively supported by Next-Gen SIEM but also with logs not officially supported. This enables detection of threat indicators across multiple systems and comprehensive security monitoring.

3. Rapid Incident Response Through Integration of Endpoint Protection and Security Log Monitoring

By combining this service with the Managed EDR Service, organizations can achieve centralized security operations—from threat detection and analysis to response—enabling faster incident response.

For more details about the service, please visit:

https://www.nri-secure.co.jp/service/mss/siem_monitoring

NRI Secure will continue enhancing its SIEM monitoring service through the development of proprietary detection rules and AI integration, aiming to enable broader utilization of security logs and more advanced analysis.

[i] EDR (Endpoint Detection and Response): A mechanism that monitors endpoint behavior (e.g., PCs, servers) to detect and respond to suspicious activities.

[ii] NeoSOC: NRI Secure’s security log monitoring service. A SOC (Security Operations Center) is a specialized organization that monitors, analyzes, and advises on responses to threats against information systems on a 24/7 basis.

[iii] SaaS (Software as a Service): A model where software or application functionality is delivered as a service over the internet.

[iv] SASE (Secure Access Service Edge): A framework that combines network and network security functions into a single cloud-delivered service.

Reference

Comment from Mr. Isao Ohashi, Representative Executive Officer and President, CrowdStrike Japan K.K.

We warmly welcome the launch of the 'SIEM Monitoring Service' by NRI Secure Technologies, Ltd.

As cyberattacks grow increasingly sophisticated and complex, organizations require faster detection and response than ever before. CrowdStrike Falcon® Next-Gen SIEM, natively integrated into the Falcon platform, supports efficient and advanced SOC operations by consolidating security data and leveraging AI-powered analysis. We are confident that the new SIEM Monitoring Service, combined with NRI Secure’s existing Managed EDR and Managed ITDR services, will significantly strengthen customers’ overall security posture.

Comment from Mr. Yūsuke Kobayashi, President, Networks Company, MACNICA, Inc.

MACNICA, Inc. warmly welcomes the inclusion of Falcon Next-Gen SIEM in NRI Secure Technologies, Ltd.'s SIEM Monitoring Service. Since 2013, we have served as the Japanese distributor, providing CrowdStrike Falcon to domestic customers. As attacks grow more sophisticated, the importance of integrated log monitoring—covering not only endpoints but also identity, network, and cloud—along with rapid incident response, is increasing. We believe this service will enable efficient and advanced security operations through the integration of Falcon Next-Gen SIEM, NRI Secure’s NeoSOC, and Managed EDR Service. We sincerely hope this service accelerates the resolution of security challenges faced by more customers and contributes to raising Japan’s overall security level.