SECURITY vendor McAfee has announced what it described as the industry's first 'endpoint aware' security information event management (SIEM) solution that adds real time system state information to enhance situational awareness and streamline incident response. The solution brings together the big security data management capabilities of McAfee Enterprise Security Manager (ESM) with the endpoint insight of McAfee Real Time, the company said in a statement. SIEM event data is combined with the proactive ability to immediately query, collect and analyse extensive endpoint context, including running processes, files, as well as system and security configuration. Thwarting advanced threats demands greater situational awareness, McAfee said. According to the 2013 Verizon Data Breach Report, 69% of breaches went from initial compromise to data exfiltration within hours. Conversely, over a third of breaches took weeks to months resolve.