Opis proizvoda

Far too often security teams spend their time manually researching a detected security threat using a variety of disconnected tools. Threat Response provides a single pane of glass designed from the ground up for the incident response process. By bringing all the relevant threat information together in one place and helping analysts identify important relationships Threat Response streamlines the workflow required to rapidly respond to a detected security threat.

Ključne prednosti

• Situational awareness
• Infection verification
• Threat containment
• Automated workflows

Mogućnosti proizvoda

• Situational awareness
  Many security alerts lack critical information required to determine the context of a threat and appropriate next steps. Threat Response automatically collects important context data to help security teams quickly understand and respond to detected security threats.
• Infection verification
  A very time-consuming part of investigating an ultimate threat report is determining whether or not the user was actually infected. Threat Response automatically confirms infections using its built-in IOC Verification Agent.
• Threat containment
  The speed at which malware can damage an organization has continued to get progressively faster, so organizations need a way to instantly contain threats once they have been confirmed. Threat Response integrates with existing security infrastructure to block verified threats, quarantine infected users and protect additional users from being infected.
• Automated workflows
  Sometimes organizations want to review detailed information prior to responding a detected security threat and other times they need to contain threats instantly the moment they are detected. Threat Response provides the ability to customize the automation of critical workflows so that organizations get the appropriate level of response for their needs.