security automation

Soar-case-management
Raj Pagariya

What is Security Case Management?

A Security Orchestration, Automation, and Response (SOAR) platform enables your security team to focus on high-priority security events while the low-priority events are automatically dealt with. A SOAR platform helps in decreasing the response time while increasing the overall efficiency. Orchestration, Automation, and Response are three components of a SOAR platform that allow an organization to manage incidents comprehensively, automate repetitive alerts, streamline and collaborative for incident investigations, better defense against threats, and high return on investment (ROI).

Continue reading

devops-methodology
Fakhar Imam

What Software Methodology Includes Security Automation?

Simply put, DevOps is a software methodology that includes security automation. Software engineering teams often equate DevOps and automation as synonymous. Most security experts believe that automation is the most quantifiable benefits for organizations.

In this article, we will explore how DevOps security automation helps in achieving better software security.

Continue reading

siem-capabilities-soar-capabilities
Fakhar Imam

The Outcomes of SIEM and SOAR in 2019 (Part 1)

Like the previous years, 2019 also witnessed the surge in data breaches and cyber-attacks. However, organizations having SIEM or/and SOAR system in place were better than those using traditional security tools. The cyber-attacks in 2019 were mostly related to financial crimes, supply chain attacks, phishing exploits, state-sponsored attacks, Grid attacks, health sector attacks, and attacks on IoT devices. Cybersecurity skills shortage was also one of the major concerns in 2019.

In this first part of the article, we will take a look at how SIEM and SOAR tools were helping organizations in 2019 to get rid of cyber-attacks.

Continue reading

What is an Incident Response Playbook
Raj Pagariya

What is an Incident Response Playbook?

Automation in security solutions has gained traction in the last 2-3 years and a SOAR solution is a prime example. SOAR stands for Security Orchestration, Automation, and Response. Without a doubt, automation is the need of the hour for an organization’s cyber security and SOAR rightly helps your SOC by enabling the internal security team to focus on serious and important events or incidents, instead of going through a plethora of events with no or minimal risk.

Continue reading

How to Initiate a Threat Hunting Program?(Part 2)
Fakhar Imam

How to Initiate a Threat Hunting Program (Part 2)?

6.   Responding to Threat or Vulnerability

In the previous steps, analysts have gathered enough data to answer their hypothesis. Two types of situations can occur. Either the real threat is found or the vulnerability is detected. In both cases, analysts action is necessary. The analysts must respond immediately when a real threat is identified. However, if there is any vulnerability, they should also resolve this before it becomes a really big nightmare.

Continue reading