Operating under Yeşilova Holding, Canel Automotive was founded in Bursa in 1988. Today, in an area of 20 thousand m2, the company produces special parts for the automotive sector, as well as for the rail system sector; It offers a wide range of products to its customers with different parts such as vehicle frames, roof racks, trunk and ventilation covers, shock absorbers.

As application and infrastructure security becomes more and more important for businesses, Canel Automotive continues to strengthen its digitalization journey with Microsoft’s cloud platform Azure. Security was one of the first elements that the company addressed at this point. In addition to actions such as port management, data security, protection of user accounts, the collection and analysis of security events and threats are other topics that are meticulously handled. Searching for SIEM (Security Information Incident Management) and SOAR (Security Regulation Automatic Response) solutions for this comprehensive process, Canel Otomotiv found the answer it was looking for in Azure.

After examining many cloud and in-house solutions, Canel Automotive preferred the cloud SIEM solution Azure Sentinel offered on Microsoft Azure in cooperation with Microsoft partner CloudCan. With this decision, Canel Otomotiv met the needs of SIEM and SOAR systems, and left behind methods such as log analysis on which many institutions base their security eco system. It has the advantage of a detailed infrastructure and instant reporting suitable for today’s threat world. Thus, the institution had the opportunity to research and reduce threats with a single solution through an environment where they could detect security threats and receive warnings about them.

Canel Automotive, which can perform threat analysis from many different data sources in Azure Sentinel, collects critical event logs from many points from online services to Office 365, from local firewalls to servers and detects anomalies related to them. One of the most important features of Sentinel for millions of logs received during the day is to turn critical anomalies into automation and enable automatic response scenarios. The solution, which enables the automation of scenarios such as password reset or user blocking in Azure Active Directory accounts when they need to take quick action with an anomaly detection, provides a real-time and full view on all systems with a hybrid structure. The company, which accelerates business processes on the security side through the playbooks they have created for different scenarios and special channel message posts for the relevant teams in Teams, is working on a ticket system that will integrate the Service Desk system of the holding it is currently affiliated with for real integration.