Discover resources about Orchestration and Automation

a stack of blue and orange rectangles on a grey background

Elevate your automation and orchestrations with low-code playbooks

ThreatConnect Low-Code Automation

Traditional threat intelligence activities often involve labor-intensive manual work, which hinders threat analysts from focusing on operational, tactical, and strategic intelligence tasks. ThreatConnect offers Low-Code Automation, a user-friendly visual workspace that allows for quick creation of automated or semi-automated tasks, processes, and playbooks through intuitive "drag and drop" functionality. Benefits of ThreatConnect's Low-Code Automation for CTI and SecOps teams include enhanced efficiency and productivity, improved consistency in operations, and increased effectiveness by standardizing workflows and automating repetitive tasks, processes, and playbooks. ThreatConnect's Low-Code Automation empowers your security team with flexibility, consistency, and rapid implementation capabilities.

ThreatConnect Low-Code Automation

ThreatConnect uses drag-and-drop functionality for low-code automation in playbooks, tasks, and processes

Explore our resources about Orchestration and Automation solutions

Topics

Types

Orchestration and Automation

ThreatConnect Low-Code Automation

ThreatConnect’s Low-Code Automation gives you the flexibility, consistency, and rapid speed implementation your security team needs.

Datasheet

Orchestration and Automation

Customer Story: Large U.S. Health System – Phishing Automation and Bulk Importing and Enrichment of Indicators

Company Type: Hospital System Industry: Healthcare Company Size: 50 Hospitals across 7 states Challenge This large, multi-state health system’s major challenges involved automating Threat Intelligence collection, IOC enrichment, creating workflow templates, and improving Case Management. The main use cases were around phishing automation and bulk importing and enrichment of indicators (using VirusTotal) and specific […]

Case Studies

Orchestration and Automation

How to SOAR with Risk Based Vulnerability Management

Risk-based vulnerability management (RBVM) is an ideal use case to operationalize and automate within SOAR as it needs to connect threat intelligence, data collection, enrichment, cross-team workflows, and incident management, all labor intensive processes. The integration of cyber risk quantification in the RBVM process via SOAR makes financial impact based decisions about which vulnerabilities to […]

Webinar

Orchestration and Automation

ThreatConnect White Paper: Intelligence-Driven SOAR

What’s needed is a new approach, one that prioritizes real-world risk mitigation — so that SecOps teams can concentrate their efforts where they’ll have the biggest impact. This requires an intelligence-driven approach to Security Orchestration, Automation, and Response (SOAR).

Whitepaper

Orchestration and Automation

ThreatConnect Intelligence-Driven SOAR Data Sheet

ThreatConnect’s intelligence-driven Security Orchestration, Automation, and Response (SOAR) Platform provides a central location to integrate not only your security tools but all of your security team’s processes. Document those processes within ThreatConnect and increase efficiency with automation and orchestration. Continuously leverage high confidence threat intelligence stored within ThreatConnect when making decisions related to both tactics […]

Datasheet

Orchestration and Automation

SANS Vulnerability Management Survey 2020

The SANS 2020 Automation and Integration Survey looks into how organizations are using automation to discover vulnerabilities and helps establish a thorough process to remediate vulnerabilities.

Survey

Orchestration and Automation

SANSFIRE 2020 – Live Online

In this webinar, experts provide live online cyber security training in the wake of COVID-19.

Webinar

Orchestration and Automation

The Connection – Using Phishing Emails to Demonstrate ThreatConnect’s SOAR capabilities

In this webinar, experts offer insight about ThreatConnect’s three aspects of SOAR: our TIP capabilities, Playbooks, and Case Management using phishing emails as the main use case for the overview.

Webinar

Orchestration and Automation

Reduce Risk and Improve Security through Infrastructure Automation

Watch this webinar to hear Joe Reese, Product Manager at ThreatConnect and guest speaker Joseph (JB) Blankenship, Principal Analyst at Forrester discuss the effect security automation is having on infrastructure and security processes. They talk about how automation can reduce security “grunt work” and increase the speed and reliability of incident response procedures. Download the […]

Webinar

Orchestration and Automation

A Fresh Look at Security Analytics

Did you know data can be viewed in three categories: “regular data, big data, and “too-big-for-you” data? In this white paper, ThreatConnect’s Director of Analytics discusses how security analytics is commonly used today, automation, and the impact of orchestration on efficiency and scale.

Whitepaper

Orchestration and Automation

Multi-Environment Orchestration

Run Any Playbook Across Any Environment, In Real-Time ThreatConnect’s Multi-Environment Orchestration expands the capabilities of Playbooks, which allows you to automate almost any cybersecurity task. ThreatConnect’s Multi-Environment Orchestration expands the capabilities of Playbooks, which allows you to automate almost any cybersecurity task.

Datasheet