On this episode of the ThreatConnect Podcast, we explore the release of ThreatConnect 6.2 which introduces two new capabilities that further unify the actions of the security team around the most critical risks and support their response with streamlined and automated workflows.
ThreatConnect 6.2 introduces two new key capabilities:
- Browser Extension
- Playbooks 2.0
These improvements enhance collaboration between security team members, reduce redundancies and improve efficiency across the entire security program.
The new Browser Extension and the enhanced Playbooks 2.0 provide security team personnel with rich, contextualized threat intelligence from any online resource and gives them more power and flexibility to collaborate their tools via automation.
When conducting research and investigation into a particular threat, analysts now have the ability to use multiple sources of threat intelligence to identify relevant pieces of information from any web-based resource. This is a critical capability when it comes to quickly understanding the severity level of the threat and allows one to add it to their threat library for future analysis and investigation efforts.
ThreatConnect 6.2 provides users the capability to scan an online resource for potential Indicators, query ThreatConnect for information about scan results, and import Indicators and Group Indicators directly into ThreatConnect from a supported web browser.
Introducing automation and orchestration of security processes greatly benefits organizations of different types and sizes and creates easier workflows to follow. Adding Playbooks 2.0 into the mix helps to handle the different workflows across teams and technologies and empowers analysts to incorporate automation in a newer, less daunting, user-friendly way.
This release introduces nearly 50 improvement and updates to the Playbook Building and Management process, all presenting the following benefits:
- Revamped look and feel increases usability and decreases frustrations
- Improved management capabilities for better collaboration, visibility, and control
- Increased confidence in the Playbook Build with more granular resting and improved troubleshooting
- Easy-to-use mechanism for documentation and collaboration with interactive note-taking capabilities