%term

The latest News and Information on Security Orchestration, Automation and Response.

Splunk SOAR Feature Overview: App Editor

Oct 19, 2021 By Splunk In Splunk

A common task on the Splunk SOAR platform is installing a new app, or updating existing apps. Apps extend the Splunk SOAR platform by integrating third-party security products and tools. With the Splunk SOAR App Editor, you can create, edit, and test apps all from one place, making the app development experience easier and faster than ever. We currently offer more than 350 premade apps that are accessible right now.

View Video

Splunk

Read more about Splunk SOAR Feature Overview: App Editor

How Cloud SOAR mitigates the cybersecurity skill gap problem in modern SOCs

Oct 7, 2021 By Davor Karafiloski In Sumo Logic

Even though the cybersecurity skill gap dropped for the first time in recorded history in 2020, it is still one of the most pressing problems in the industry. Demand continues to eclipse the supply of skilled cybersecurity professionals. The scarcity of qualified security workers with the right skill set, experience, and talent means that critical vulnerabilities turn many organizations into sitting ducks in the eyes of hackers.

Read Post

Sumo Logic

Read more about How Cloud SOAR mitigates the cybersecurity skill gap problem in modern SOCs

Splunk SOAR Feature Overview: Main Dashboard

Sep 27, 2021 By Splunk In Splunk

Splunk SOAR’s Main Dashboard provides an overview of all your data and activity, notable events, playbooks, connections with other security tools, workloads, ROI, and so much more.

View Video

Splunk

Read more about Splunk SOAR Feature Overview: Main Dashboard

Splunk SOAR Feature Overview: Event Management

Sep 27, 2021 By Splunk In Splunk

Analysts are often overwhelmed with a large volume of security events. Splunk SOAR makes event management easy by consolidating all events from multiple sources into one place. Analysts can sort and filter events to identify high fidelity notable events and prioritize action.

View Video

Splunk

Read more about Splunk SOAR Feature Overview: Event Management

Splunk SOAR Feature Video: Case Management

Sep 27, 2021 By Splunk In Splunk

Case management functionality is built into Splunk SOAR. Using workbooks, you can codify your standard operating procedures into reusable templates. Splunk SOAR supports custom and industry standard workbooks such as the NIST-800 template for incident response. You can divide tasks into phases, assign tasks to team members, and document your work.

View Video

Splunk

Read more about Splunk SOAR Feature Video: Case Management

Splunk SOAR Feature Overview: Mobile

Sep 27, 2021 By Splunk In Splunk

Splunk SOAR’s orchestration, automation, response, collaboration, and case management capabilities are also available from your mobile device.

View Video

Splunk

Read more about Splunk SOAR Feature Overview: Mobile

Splunk SOAR Feature Overview: Custom Functions

Sep 27, 2021 By Splunk In Splunk

Splunk SOAR’s custom functions allow you to share custom code across playbooks while introducing complex data objects into the execution path. These aren’t just out-of-the-box playbooks, but out-of-the-box custom blocks that save you time and effort. These capabilities provide the building blocks for scaling your automation, even to those without coding capabilities.

View Video

Splunk

Read more about Splunk SOAR Feature Overview: Custom Functions

How to Choose Between XDR, SIEM, and SOAR

Sep 24, 2021 By Arctic Wolf In Arctic Wolf

Most organizations understand the critical role that cybersecurity solutions play in protecting their environment. However, the abundance of available tools that claim to serve that need are leaving them unsure they're actually protected against today's sophisticated threats.

Read Post

Arctic Wolf

Read more about How to Choose Between XDR, SIEM, and SOAR

5 reasons why security automation won't replace skilled security professionals

Sep 15, 2021 By Dario Forte In Sumo Logic

The cybersecurity landscape is constantly evolving, even more so in the past decade, with technological revolutions changing the core of the cybersecurity industry. With new emerging technologies, machine learning, security automation, and AI are slowly but surely becoming a reality in the cybersecurity world. But as the cybersecurity landscape continues and redefines the roles of security workers, which logically begs the question - what does this mean for security professionals?

Read Post

Sumo Logic

Read more about 5 reasons why security automation won't replace skilled security professionals

Uncovering the powers of Cloud SOAR's Open Integration Framework

Sep 12, 2021 By Davor Karafiloski In Sumo Logic

The speed at which security operations are processed and data is consumed is moving at a dazzling pace. This is why flexibility, customizability, and user-friendliness are deemed as core pillars of next-gen security solutions. And it is exactly what Cloud SOAR’s Open Integration Framework is all about.

Read Post