Discover resources about Orchestration and Automation

ThreatConnect White Paper: Intelligence-Driven SOAR

Explore our resources about your favorite topics in the format you prefer

Topics

Types

Customer Story: Large U.S. Health System – Phishing Automation and Bulk Importing and Enrichment of Indicators

Company Type: Hospital System Industry: Healthcare Company Size: 50 Hospitals across 7 states Challenge This large, multi-state health system’s major challenges involved automating Threat Intelligence collection, IOC enrichment, creating workflow templates, and improving Case Management. The main use cases were around phishing automation and bulk importing and enrichment of indicators (using VirusTotal) and specific […]

Case Studies

How to SOAR with Risk Based Vulnerability Management

Risk-based vulnerability management (RBVM) is an ideal use case to operationalize and automate within SOAR as it needs to connect threat intelligence, data collection, enrichment, cross-team workflows, and incident management, all labor intensive processes. The integration of cyber risk quantification in the RBVM process via SOAR makes financial impact based decisions about which vulnerabilities to […]

ThreatConnect White Paper: Intelligence-Driven SOAR

What’s needed is a new approach, one that prioritizes real-world risk mitigation — so that SecOps teams can concentrate their efforts where they’ll have the biggest impact. This requires an intelligence-driven approach to Security Orchestration, Automation, and Response (SOAR).

ThreatConnect Intelligence-Driven SOAR Data Sheet

ThreatConnect’s intelligence-driven Security Orchestration, Automation, and Response (SOAR) Platform provides a central location to integrate not only your security tools but all of your security team’s processes. Document those processes within ThreatConnect and increase efficiency with automation and orchestration. Continuously leverage high confidence threat intelligence stored within ThreatConnect when making decisions related to both tactics […]

Datasheet

SANS Vulnerability Management Survey 2020

The SANS 2020 Automation and Integration Survey looks into how organizations are using automation to discover vulnerabilities and helps establish a thorough process to remediate vulnerabilities.

SANSFIRE 2020 – Live Online

In this webinar, experts provide live online cyber security training in the wake of COVID-19.

The Connection – Using Phishing Emails to Demonstrate ThreatConnect’s SOAR capabilities

In this webinar, experts offer insight about ThreatConnect’s three aspects of SOAR: our TIP capabilities, Playbooks, and Case Management using phishing emails as the main use case for the overview.

Reduce Risk and Improve Security through Infrastructure Automation

Watch this webinar to hear Joe Reese, Product Manager at ThreatConnect and guest speaker Joseph (JB) Blankenship, Principal Analyst at Forrester discuss the effect security automation is having on infrastructure and security processes. They talk about how automation can reduce security “grunt work” and increase the speed and reliability of incident response procedures. Download the […]

SOAR Platforms: Free SOAR eBook

Everything you need to know about security orchestration, automation, and response. Your Adversaries are Adaptive. Your Processes Must be too. A SOAR platform represents an evolution in security operations driven by the vast amounts of data that must be processed. Even for the most skilled team, keeping up with the threat landscape, increasingly complex IT […]

A Fresh Look at Security Analytics

Did you know data can be viewed in three categories: “regular data, big data, and “too-big-for-you” data? In this white paper, ThreatConnect’s Director of Analytics discusses how security analytics is commonly used today, automation, and the impact of orchestration on efficiency and scale.