VirtualMetric DataStream

Security Data Pipeline for Microsoft Security

DataStream is VirtualMetric’s high-performance security telemetry pipeline solution, built to optimize data ingestion, routing, and storage across Microsoft’s security ecosystem. Designed to reduce costs and simplify log management, DataStream delivers seamless integration with Microsoft Sentinel, Microsoft Sentinel data lake, and Azure Blob Storage.

Intelligent Data Routing

DataStream ensures that security-relevant data is routed efficiently to the right destination:

• Microsoft Sentinel: Receives high-priority and security-critical logs for detection and response.
• Microsoft Sentinel data lake: Stores logs used for threat hunting and security analytics.
• Azure Blob Storage: Archives logs required for compliance and long-term retention at a reduced cost.

Key Features

• Agent(less) Data Collection: Collects telemetry from servers, applications, network devices, and endpoints without requiring local agents. Optional agents available for deeper visibility where needed.
• Automated Log Normalization: Converts structured and unstructured logs into Microsoft’s CommonSecurityLog (CSL) and ASIM-compliant formats.
• SmartEngine, detection-based filtering: Filters logs against KQL, Sigma, and YARA detections so only relevant events reach your SIEM.
• Threat Intelligence Enrichment and Routing Policies: Adds contextual data and reduces noisy or redundant data upstream, optimizing ingestion.

Benefits

Organizations using DataStream typically experience:

• 50% to 90% reduction in data volume ingested into SIEM.
• 25% to 75% reduction in manual data collection and processing efforts.

Enterprise-Grade Architecture

• Vectorized Pipeline: Built for scalable, high-throughput performance.
• Crash-Resistant Processing: Write-ahead log and state-aware clustering guarantee reliability and prevent data loss.
• Azure-Native Security and Governance: Uses Managed Identity for secure authentication, keeps data within your environment, and adds RBAC, SSO, audit logging, and drift detection.