Marta Teknoloji
AR-GEActiveR&D Product

MartaSecurity — Marta Threat Notification System

MartaSecurity consists of an agent installed on Windows and Linux servers and clients, and a multi-tenant central web console. It monitors Active Directory and Windows security events, detections enriched with Sysmon and Sigma rules, and Linux system logs, and sends email and SMS notifications on significant events. Inventory, patching, device restrictions, hardening and audited remote access are managed from the same console. The central console is offered as a service on a multi-tenant server operated by Marta Teknoloji; the agent is installed on endpoints with a Windows MSI or a Linux install script, and mass deployment can be done via GPO. Remote access (Guacamole, RustDesk) and optional Wazuh components run on the central server side.

Request DemoCall NowDownload brochure (PDF)
109+Features
9+Tech Details
7/24Support
MartaDeveloper

Developed by Marta Teknoloji

Mersin Technopark — R&D

Features & Capabilities

109 features
01

Windows and Active Directory threat detection

13 features
  • Security, System, Application and PowerShell logs scanned every 5 minutes
  • Directory Service log and Kerberos events added on domain controllers
  • Off-hours and weekend interactive/RDP logon alerts
  • Brute force detection: 5 failed logons or Kerberos pre-auth failures per user within 10 minutes

+9 more

02

Sysmon and Sigma-based advanced detection

8 features
  • Automatic Microsoft Sysmon installation with a ready-made configuration
  • Credential theft attempt alert on LSASS memory access (critical)
  • Process injection (remote thread) and process tampering detection
  • Shells launched from Office applications such as Word, Excel and Outlook

+4 more

03

Process and file integrity

5 features
  • Digital signature status, publisher and SHA-256 for every running process
  • 'Binary tampered' alert when a file at the same path changes hash or loses its Microsoft signature
  • Alert for unsigned processes running long from temp or user folders
  • File integrity monitoring: hosts file, Startup folders and Run/RunOnce registry keys

+1 more

04

Linux monitoring

7 features
  • Linux agent running as a systemd service
  • SSH authentication failure, invalid user and root logon alerts
  • sudo usage and failed sudo attempts
  • Local account and group changes, package manager activity

+3 more

05

Notification and reporting

11 features
  • Email notification on high and critical alerts, as an HTML table with customer, server and IP
  • SMS to the customer's phone list on high and critical alerts
  • SMS providers: SanalSantral, Netgsm, İletiMerkezi, Teknomart; test send
  • Customers can configure their own SMTP and SMS provider

+7 more

06

Inventory and visibility

12 features
  • Running processes (every 15 minutes) and on-demand refresh
  • Installed programs
  • Hardware: manufacturer, model, serial, CPU, memory, disks, BIOS, last boot
  • Services and scheduled tasks (non-Microsoft tasks listed first)

+8 more

07

Endpoint management and response

11 features
  • Scan pending Windows updates and install all; installed KB list
  • Remote program install (Chocolatey package or MSI URL) and uninstall
  • Device restrictions: block/allow USB storage, CD/DVD, Bluetooth, webcam, USB audio, USB printers
  • Start, stop and restart services

+7 more

08

Hardening and audit policy

9 features
  • Automatic enabling of audit policies (Turkish Windows compatible)
  • PowerShell ScriptBlock and module logging, command-line auditing, file share auditing
  • Read-only hardening audit: password policy, stale/PNE accounts, krbtgt age, RDP NLA, log sizes
  • Disable accounts with no logon for 90 days (with allowlist)

+5 more

09

Policy management and alert suppression

8 features
  • Central policies distributed to agents automatically
  • Multiple policies assigned to groups or agents
  • Drag-and-drop priority and a conflict view showing which policy wins each setting
  • 101 ready-made templates: detection, mail, logging, Sysmon, Hayabusa, inventory, working hours, summary, role, quiet, update, Linux

+4 more

10

Remote access and session audit

6 features
  • Browser-based RDP to Windows endpoints, SSH and VNC to Linux endpoints
  • Connections run over the agent's outbound encrypted tunnel; no inbound ports needed on the endpoint
  • 90-minute cap per session
  • RDP and VNC session recording (keystrokes excluded), downloadable recordings

+2 more

11

Multi-tenant management and deployment

11 features
  • Isolated agents, groups, policies and alerts per customer
  • Super-admin and customer user roles; customer users see only their own data
  • Per-customer agent quota
  • Per-customer email and phone recipient lists

+7 more

12

Security and operations

8 features
  • TOTP-based two-factor authentication (Google Authenticator compatible)
  • Login attempt limiting and CSRF protection
  • Prevents deleting or disabling the last super-admin
  • Agent secrets (SMTP password, API key) encrypted with DPAPI on Windows

+4 more

Technical Details & Architecture

9 specs
1
Supported endpoints: Windows servers and clients (64-bit; domain controller, member server, workstation); 64-bit Linux (dpkg/rpm-based distributions)
2
Architecture: Agent running as a service on the endpoint + multi-tenant central web console; the agent only makes outbound connections
3
Agent installation: Windows MSI (silent install, mass deployment via GPO), per-customer installer; Linux install script (systemd service)
4
Detection sources: Windows event logs (every 5 minutes), Sysmon, Hayabusa Sigma scan (every 30 minutes), Linux journald
5
Notification channels: Email (central or customer-owned SMTP); SMS: SanalSantral, Netgsm, İletiMerkezi, Teknomart
6
Authentication and authorisation: Username/password, optional TOTP-based MFA, login attempt limiting; super-admin and customer roles
7
Data retention: Alerts, process and network data 30 days; agent service logs 7 days; resource charts last 300 samples
8
Resilience and updates: Agent-side queue during outages (30 days / 100,000 records); SHA-256-verified automatic agent updates

Interested in this product?

Schedule a live demo or request a technical brief from our team.

Request Demo
MartaSecurityuç nokta güvenliğitehdit bildirimiActive Directory izlemeWindows olay günlüğüSysmonSigmaLinux journaldMSPçok kiracılıuzak erişimaygıt kısıtlama

Other Products

Active
LogHane
Cloud-based log retention for Law 5651: FortiGate logs are sealed hourly in the cloud without a server, timestamped and kept in a delete-proof archive.
View
Active
Kimliq SSO
Enterprise Single Sign-On (SSO) identity authentication software.
View
Active
DNS / Web Filtering
DNS filtering software that blocks harmful content and inappropriate websites at the network layer.
View
Active
Lucia Network Analysis
Domestic network analysis software for real-time monitoring and analysis of corporate network traffic.
View