The SpectX log parser and query engine is now available for smaller teams and organizations, enabling them to get fast and accurate results in incident investigation, threat hunting, and data integration.
Starting at 79€/month, SpectX Business license introduces several opt-in features for analyzing raw log files stored in file servers, S3, Azure, Google Storage, Elastic clusters, and databases. No need for long-term contracts or complex licensing, the user can choose the features and performance they need, including:
As each query runs on original log files, the results are quick and accurate, with no data pre-processing, indexing, or ingestion involved. SpectX can be installed on a desktop as well as on a remote server. The setup is quick, no need to plan any additional infrastructure for indexed data. The easy-to-read parsing and query language help analysts transform even the most unique log structures into clean datasets, script complex queries, and enrich data, e.g. with Maxmind databases.
Licensing options and package comparison are available on the SpectX pricing page.
Back to articles
Analyzing Windows Events
Whether it is user activity, admin events, specific event IDs you’re looking for, SpectX allows you to instantly read, parse and query original .evtx files in their current location. SpectX runs on Windows, Linux as well as OSX, so you don't necessarily need a Windows machine to analyze .evtx files, as long as you have access to the files.
SpectX introduces log analysis learning modules in Rangeforce
To give our users a quick start at security analysis and threat hunting, we have created four 30-minute free SpectX training modules in partnership with the RangeForce cybersecurity training platform. You can now follow simple step-by-step instructions using pre-prepared virtual infrastructure and sample log datasets to master rapid log analysis with SpectX.
Investigate Exchange Server Logs to Detect the HAFNIUM Exploit
In case you are working directly with raw log files to analyze the Exchange Server 0-day vulnerability, we have prepared these SpectX queries to help you detect if, how, and when your Exchange server was hit.
Introducing SpectX Business
SpectX log parser and query engine for instant log investigation and query automation is now available for smaller teams and organizations. Starting at 79€/month, the Business license introduces several opt-in features for analyzing raw log files stored in file servers, S3, Azure, Google Storage, Elastic clusters and databases.
