Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Security Orchestration, Automation and Response.

splunk

Splunk SOAR Playbook of the Month: Splunk Attack Analyzer Dynamic Analysis

May 16, 2024 By Coty Sugg In Splunk
Alert triage can be a very cumbersome and time consuming process for SOC teams. Our recent State of Security report found that 26% of respondents agree that the volume of alerts they deal with makes it difficult to keep up with addressing emergencies. While tools like virtual sandboxes can help analysts better test and understand the severity of the threats they encounter, the process of testing and documenting results can add further tedium to an already prolonged process.
Read Post
CrowdStrike

Falcon Fusion SOAR and Machine Learning-based Detections Automate Data Protection Workflows

May 15, 2024 By Healy Dwyer In CrowdStrike
Time is of the essence when it comes to protecting your data, and often, teams are sifting through hundreds or thousands of alerts to try to pinpoint truly malicious user behavior. Manual triage and response takes up valuable resources, so machine learning can help busy teams prioritize what to tackle first and determine what warrants further investigation.
Read Post
knowbe4

KnowBe4 Named a Leader in the Spring 2024 G2 Grid Report for Security Orchestration, Automation, and Response (SOAR) Software

Apr 17, 2024 By Stu Sjouwerman In KnowBe4
We are excited to announce that KnowBe4 has been named a leader in the Spring 2024 G2 Grid Report for Security Orchestration, Automation, and Response (SOAR) for the PhishER platform for the 12th consecutive quarter! The latest G2 Grid Report compares Security Orchestration, Automation, and Response (SOAR) Software vendors based on user reviews, customer satisfaction, popularity and market presence. Based on 278 G2 customer reviews, KnowBe4’s PhishER platform is the top ranked SOAR software.
Read Post
Torq

Stop SOAR From Killing Your SOC Budget With Hyperautomation

Apr 17, 2024 By Torq In Torq
Cyberthreats are escalating and SOC budgets are tightening. It’s a recipe for disaster, that is, unless you take advantage of new technologies that keep both in check. The fact is, businesses are now spending nearly a third of their cybersecurity budget towards running an in-house SOC, averaging out to $2.86 million per year, according to Ponemon.
Read Post
splunk

Splunk SOAR Playbook of the Month: Cisco Umbrella DNS Denylisting

Apr 12, 2024 By Coty Sugg In Splunk
Given the recent exciting news of Splunk becoming part of Cisco, for this edition of Splunk SOAR Playbook of the Month, we thought what better way to showcase how the combination of Cisco and Splunk can help users achieve more comprehensive security than through a playbook that combines the power of Cisco Umbrella and Splunk SOAR.
Read Post
splunk

Short Staffed? Try Using SOAR to Augment Your Security Team

Feb 13, 2024 By Frank Myers In Splunk
The tech world is grappling with an imbalance between skilled technical talent availability and demand, with far-reaching impacts. Combined with tightened budgets, staff shortages can leave your organization vulnerable to hacking and cyberattacks. Let’s look at just two of the industries being affected: higher education and state and local governments.
Read Post
splunk

Introducing Our New SOAR Integrations: Why Panorama and FortiManager Users Should Be Excited

Dec 15, 2023 By Coty Sugg In Splunk
Hello there, cybersecurity aficionados! We're thrilled to unveil our latest and greatest Splunk SOAR apps, tailored for the giants of the firewall space: Panorama and FortiManager. These sophisticated apps help us deliver the most compelling automation for our community, no matter the tools they have deployed. Much like our playbooks packs from earlier this year, these integrations are another great way for users to align their incident response approach to MITRE D3FEND.
Read Post
splunk

Reduce Operational Complexity with Splunk SOAR Logic Loops

Dec 8, 2023 By Senthil Nithiyananthan In Splunk
Last week, we released Splunk SOAR 6.2 (Security Orchestration Automation and Response) and in the accompanying announcement blog, we highlighted some of the new key features found in this release. Today, we want to take a more in-depth look at one of those features, logic loops, and show how they make it easier than ever for security engineers and analysts to save time and cut down on repetitive manual tasks.
Read Post

Splunk SOAR Logic Loops Demo

Dec 7, 2023 By Splunk In Splunk
Logic Loops are a feature in Splunk SOAR that allow users to reduce the operational complexity of building and maintaining playbooks that require repeatable looping functionalities without having to write their own custom code. This iterative function allows users to automatically retry playbook actions if they fail, or continue with the rest of the playbook when the action succeeds. This function can be applied to use cases like sandbox engines for malicious URL quarantine and remediation as well as forensic investigation workflows.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.