Cyberattacks have shifted toward organized crime and state actors conducting targeted, long-running campaigns aimed at critical business and production systems, with sensitive assets like intellectual property becoming prime targets. Traditional perimeter controls such as firewalls, IDS, and IPS remain necessary but struggle with today’s alert volumes and cannot reliably detect threats like compromised credentials or zero-day attacks. This drives demand for platforms that run complex, real-time analytics over both current and historical data to identify multi-stage patterns and anomalies that may signal new attack types or fraud.
Modern SIEM and emerging SOAR approaches address these needs by integrating large, multi-source data sets and reducing them to a smaller set of high-confidence alarms. Two broader evolutions underpin effective security programs: moving from a protection-only mindset to end-to-end coverage from risk identification through recovery, and expanding beyond network security to include application and data layers while aligning with compliance tooling.
SAP Enterprise Threat Detection (ETD) is positioned as an application-layer, SAP-tailored threat detection capability that complements general SIEM solutions. It detects suspicious behavior by understanding SAP event semantics across SAP HANA and SAP applications, supports near real-time analytics, and enables forensics and threat hunting. Key differentiators include predictable licensing based on monitored users rather than log volume, and reduced configuration effort compared to generic SIEM tooling for SAP-specific events.
Architecturally, ETD combines a log pre-processor (normalization, enrichment, pseudo-anonymization, semi-automated log learning, multi-source ingestion including SIEM integrations) with SAP HANA analytics. It provides dashboards, visual analytics, table drill-downs, archiving of raw and normalized data, and regularly updated detection patterns (every two months). SAP’s partner ecosystem includes SIEM vendors and service providers, and a Cloud Edition on SAP Cloud Platform (from March 2021) adds a managed-service option to reduce operational burden and required expertise.
