Read insights, thought leadership, and platform updates.

Explore all posts

Topics

Showing 12 posts about Security Operations

Zero Trust Steps Up To Shut Down Threat Actors

Over a decade ago, Forrester Research introduced the concept of zero trust. Today, zero trust is considered one of the leading frameworks to guide information and security architects in the design of robust and resilient information security architectures. This is a very important aspect of zero trust – it’s a framework that influences security architectures […]

Posted Apr 24th, 2023

Intelligence-Powered Security Operations

Intelligence-Powered Security Operations: Evolve Beyond Traditional SecOps

In the fast-paced, ever-changing cybersecurity landscape today, organizations recognize the need to transform their security operations to achieve greater effectiveness and deliver better protection while demonstrating a measurable return on investment. When threat intelligence operations (TI Ops) infuses cyber threat intelligence into everything a security team does, it results in better decision-making, greater efficiency, and […]

Posted Dec 22nd, 2022

Security Operations

Improve SOC Efficiency with Intelligence-Powered Security Operations

The critical challenge for Security Operation Centers (SOC) is minimizing the window of opportunity for attackers by quickly detecting and responding to threats. The time taken to detect and mitigate the threats are tracked by two metrics: Mean Time To Detect (MTTD) and Mean Time To Respond (MTTR). The efficiency of the SOC is typically […]

Posted Oct 21st, 2022

Security Operations

The UK’s Cyber Strategy 2022: The 5 Pillars

This past year has seen ruthless cyber attacks on individuals, businesses and nation-states. Colonial Pipeline, Ireland’s Health Service Executive (HSE), JBS, and Florida’s Water Supply are just some examples of gaps in securing critical infrastructure. It’s time for governments to be drivers of change and take steps to counter growing threats. The United Kingdom is […]

Posted Dec 22nd, 2021

Security Operations

Inside Today’s SOC: More Spending, Fewer Skilled Staff, Less Capability

Security Operations Center (SOC) teams are being stretched to the breaking point. Although global cybersecurity spending continues to grow at a record pace, eclipsing investments in many other areas of technology, risk management, and operational infrastructure, few security operations centers are achieving the meaningful and demonstrable results that Chief Information Security Officers (CISOs) are hoping […]

Posted Aug 26th, 2021

Security Operations

The ROI of Security and the SOC

The Return on Investment of any cybersecurity investment does not fall under the traditional definition of ROI. Cybersecurity is a pure cost center – in an average organization no revenue can ever be derived from it, and it represents a significant cost. In order to calculate an ROI figure for such a cost center, we […]

Posted May 26th, 2021

Security Operations

ThreatConnect’s New Whitepaper is a Must-Read For CISOs and SOC Directors

Chief Information Security Officers have more data on cyber threats and vulnerabilities than ever before. However, the majority of them still struggle to explain risk to their C-suite and boardroom counterparts in language-centered on business impact and financial risk. One of the most critical challenges facing CISOs today is this inability to understand the core […]

Posted May 19th, 2021

Security Operations

8 Ways SOC & IR Teams Can Use ThreatConnect’s Workflow Capability

ThreatConnect’s Workflow capability enables users to continuously improve security processes with a single Platform for process documentation, team collaboration, and artifact enrichment. With Workflow, teams gain efficiencies by streamlining and automating discovery, investigation, monitoring, and response activities. This blog will go over some common use cases SOC and IR teams can accomplish leveraging ThreatConnect Workflow. […]

Posted Dec 22nd, 2020

Incident Response

ThreatConnect and Shodan: Enrich threat data to enhance decision making

ThreatConnect and Shodan have partnered to deliver the Shodan Playbook App. This app allows you to retrieve multiple types of enrichment information for IOCs. Additionally, it allows you to craft custom Shodan searches to retrieve result sets based on factors such as software versions being run, services running, open ports, and more. You can even […]

Posted Aug 4th, 2020

Security Operations

ThreatConnect’s Security Operations Maturity Model

ThreatConnect is out to change the way security works with cybersecurity software that reduces complexity for everyone, makes decision making easy and unifies processes and technology to constantly improve defenses and drive down risk. It’s why we’ve evolved from our heritage as a leading Threat Intelligence Platform (TIP) to deliver a full suite of intelligence-driven […]

Posted Jul 10th, 2020

Security Operations

How to Improve Collaboration with Security Teams and Technology using ThreatConnect

ThreatConnect is an intelligence-led, SOAR Platform. We bring a critically important solution to market for our clients as we combine our world-class Threat Intelligence Platform with SOAR under one banner. This ensures that intelligence feeds operations and operations informs intelligence for future actions, continually improving the time to detect and respond to threats. In our […]

Posted May 7th, 2020

Security Operations

Improving Accuracy and Efficiency in Security Operations with ThreatConnect

ThreatConnect is the central nervous system for your entire security ecosystem. Our intelligence-driven Security Orchestration Automation and Response (SOAR) Platform is a place for your security team to work smarter, together. As a company, we are driving the evolution of security operations by delivering enriched, fortified, context-filled threat intelligence along with comprehensive analytics, seamless automation […]

Posted Apr 30th, 2020