The Importance of Threat Intelligence Feeds

The Importance of Threat Intelligence Feeds

Threat Intelligence Feeds, in fact, are an actionable threat data related to artifacts or indicators collected from any third-party vendors in order to learn from other company’s visibility and access to enhance your own cyber threat response and awareness. The example of these third-party vendors includes Kaspersky Threat Intelligence and Alient Vault OTX. Threat Intelligence Feeds concentrate on a single area of interest and they are delivered online. For instance, these data feeds can be about IP addresses, hashes, or domains.

Continue reading

How to Automate Threat Hunting?

Security Orchestration Use Case: How to Automate Threat Hunting?

Threat hunting is the practice of iteratively and proactively hunting for threats or Advanced Persistent Threats (APT) that are launched by adversaries. Unlike traditional security systems such as antivirus program, firewalls, or SIEM, who use a reactive approach to threats, threat hunting utilizes a proactive approach to pursuing threats even before they compromise organization’s network or IT infrastructure.

Continue reading

SOAR Functional Components (Part 2)

Incident Management and Collaboration

Incident Management and Collaboration is another of Security Orchestration, Automation and Response (SOAR) platforms’ essential practice whereby security teams can manage security incidents, collaborate, and share information to deal with the incident efficiently and effectively. The best incident management and collaboration plan answer the following questions:

Continue reading

Why do we need automation in Security? – An Introduction to SOAR

Pick up any industry and you will realize that every one has gone through an evolution – from being entirely dependent on humans to being now run majorly by machines and automated processes. There comes a point, for every industry, where in order to function efficiently and effectively operate, automation becomes a necessity. In the case of cyber security, this necessity is driven by exponentially increasing complexity of threats, volume of data being recorded, financial limitations, personnel requirements, and other resource constraints. Supply chain, human resources, finances & accounting, manufacturing, IT, etc. are some of the industries that have already been influenced by the wave of automation.

Continue reading