SOAR Blog Posts | D3 Security

Platform
- - - Platform
      
      The Smart SOAR platform delivers the automation capabilities you need to outpace and outthink cyber threats.
      
      Smart SOAR for Enterprise
      
      Smart SOAR for MSSP
    - Get started with D3 Security
      
      Want to see us in action? You can get started with SOAR today.
      
      Get Started
Why D3 Security?
- - - Why Smart SOAR?
      
      D3 Security is the leader in security automation and incident response.
      
      Smart SOAR for Enterprise
      
      Smart SOAR for MSSP
    - Get started with D3 Security
      
      Want to see us in action? You can get started with SOAR today.
      
      Get Started
Solutions
- - - Solutions
      
      Next-generation SOAR technology with flexibility and expertise tailored to the needs of your organization.
    - SOAR Implementation Service
    - SOAR Replacement Service
    - Get started with D3 Security
      
      Want to see us in action? You can get started with SOAR today.
      
      Get Started
Partners
- - - Partners
      
      See how D3 Security works with our partners to enable seamless multi-vendor security orchestration and incident response.
    - Integrations
    - Sales Channel
    - Become a Partner
    - Get started with D3 Security
      
      Want to see us in action? You can get started with SOAR today.
      
      Get Started
Resources
- - - Resources
      
      The source for the latest D3 Security content and SOAR reports, including case studies, data sheets, and webinars.
    - Gartner SOAR Market Guide
      
      Learn what Gartner says about SOAR strategies and vendors.
      
      GET NOW
Company
- - - Company
      
      Get a behind-the-scenes look at D3 Security . Learn about our mission, leadership and careers. We’re hiring!
    - Get started with D3 Security
      
      Want to see us in action? You can get started with SOAR today.
      
      Get Started
Get Started

Why Smart SOAR is the Best SOAR for Trend Vision One

Integration Guide ,
SOAR

by Pierre Noujeim - May 26, 2023

Trend Vision One is a comprehensive cybersecurity platform that offers robust protection and threat intelligence capabilities. When integrated with D3 Security’s Smart SOAR (security orchestration, automation, and response), organizations can further enhance their security operations, streamli...

Alert Normalization the Smart Way

SOAR

by Pierre Noujeim - May 25, 2023

Normalization plays a key role in the automation process for enterprise incident response and MSSP service delivery. How (or if) your SOAR tool converts different alert structures into a standard format can make or break your automation project. Here is an example that illustrates why: Say you are b...

Sick and Tired of “Dumb SOAR”? Smart SOAR Is the Answer

SOAR

by Shriram Sharma - May 24, 2023

Frustrated with your current Security Orchestration, Automation, and Response (SOAR) platform? You’re not alone. 70% of our new customers in 2022 signed up with us after experiencing challenges with their previous SOAR solutions. These organizations, just like you, were searching for a more co...

Why D3 Smart SOAR is the Best SOAR for Zscaler

SOAR

by Pierre Noujeim - May 22, 2023

D3 Security’s Smart SOAR (security orchestration, automation, and response) is an advanced platform designed to harmonize a variety of security tools and streamline incident response workflows. Zscaler, a renowned provider of cloud-based information security, offers services that protect organ...

How MSSPs Can Save Thousands of Hours in Their SOAR Implementation with Automated Client Onboarding

MSSPs ,
SOAR

by Pierre Noujeim - May 19, 2023

For mid and large-sized MSSPs, client onboarding is an important consideration. An entirely manual process can take weeks and exposes you to preventable issues that can delay the project or go unnoticed until a production issue occurs. D3 Smart SOAR has automated the client onboarding process with a...

Defending Against Valid Account Threats: A Holistic Workflow with CrowdStrike, Okta, Elastic, and Recorded Future

Incident Response ,
SOAR

by Pierre Noujeim - May 18, 2023

As organizations seek to bolster their cyber defense strategies, the MITRE ATT&CK framework has emerged as a valuable resource for understanding and categorizing real-world threats. This globally-accessible knowledge base offers a comprehensive and structured approach to enumerating the tactics,...

Automate Network Security with the Best Independent SOAR for Palo Alto NGFW

Integration Guide ,
SOAR

by Pierre Noujeim - May 16, 2023

D3 Security’s Smart SOAR (security orchestration, automation, and response) is a powerful platform designed to unite disparate security tools and streamline incident response workflows. Palo Alto Next Generation FireWall (NGFW) is a leading network security solution that helps organizations pr...

How Smart SOAR Automates Threat Hunting

SOAR

by Shriram Sharma - May 16, 2023

Threat hunting is a critical practice for catching sophisticated threats that may bypass the most advanced detection tools in a SOC. It helps organizations stay ahead of potential threats before they transform into significant issues. In threat hunting, analysts aim to identify signs of a potential ...

Why Smart SOAR is the Best SOAR for Okta

Integration Guide ,
SOAR

by Pierre Noujeim - May 11, 2023

D3 Security’s Smart SOAR (security orchestration, automation, and response) is a powerful platform that consolidates numerous security tools and optimizes incident response processes. Okta, a leading identity and access management provider, specializes in single sign-on, multi-factor authentication,...

Why Smart SOAR is the Best SOAR for Active Directory

Integration Guide ,
SOAR

by Pierre Noujeim - May 8, 2023

D3 Security’s Smart SOAR (security orchestration, automation, and response) is a powerful platform designed to unify disparate security tools and streamline incident response workflows. One of the most widely used tools in the cybersecurity ecosystem is Microsoft’s Active Directory (AD), a cen...

Why D3 Smart SOAR is the Best SOAR for Carbon Black

Integration Guide ,
SOAR

by Pierre Noujeim - May 4, 2023

Carbon Black is a powerful endpoint protection platform, offering advanced threat hunting and incident response capabilities. When integrated with D3 Smart SOAR, it can further enhance your organization’s security posture by automating the incident response process, reducing the time it takes ...

How to Reduce the Financial Impact of Security Incidents by 90% or More with Smart SOAR

Integration Guide ,
SOAR

by Pierre Noujeim - May 1, 2023

“By 2024, organizations that adopt a cybersecurity mesh architecture to integrate security tools, so that they work together as an ecosystem, will reduce the financial impact of individual security incidents by 90%, on average.” – Gartner In 2017, Equifax, one of the largest credit reporting a...

I’m the CRO at a Master MSSP. Here’s How We Drive Revenue with SOAR

MSSPs ,
SOAR

by Stephan Tallent - April 25, 2023

The MSSP landscape has changed. The bread and butter for MSSPs have traditionally been security asset management. However, MSSPs must now perform detection and response functions to remain relevant, which goes beyond just deploying and managing security assets. In order for MSSPs to thrive in an in...

D3 Security Launches MSSP Client Management Portal for Smart SOAR™ Platform

MSSPs ,
News
SOAR

by Walker Banerd - April 24, 2023

Vancouver, BC—April 24, 2023—D3 Security, the security orchestration, automation, and response (SOAR) vendor that does what others can’t, today announced that it will unveil its MSSP Client Portal this week at the 2023 RSA Conference in San Francisco. The MSSP Client Portal is a one-stop shop for ma...

Automatically Triage and Respond to Mimikatz Alerts with CrowdStrike, Okta, and Smart SOAR

Integration Guide ,
SOAR

by Pierre Noujeim - April 19, 2023

Credential dumping alerts are a sign that a device has been compromised. Your ability to verify this threat, measure the scope of the breach, and stop it in its tracks can be augmented using playbooks in Smart SOAR. Automation in D3 is divided into two tiers: Triage at the event level. Response at t...

D3 Security Launches Smart SOAR™, Delivering Higher ROI, Faster Response & More Confidence

News ,
SOAR

by Walker Banerd - April 17, 2023

Vancouver, BC—April 17, 2023—D3 Security, the security orchestration, automation, and response (SOAR) vendor that does what others can’t, today announced the launch of its Smart SOAR™ platform, which expands beyond traditional SOAR with hyperscalable, risk-based autonomous triage and incident remedi...

Why Smart SOAR is the Best SOAR for SentinelOne

Integration Guide ,
SOAR

by Pierre Noujeim - April 11, 2023

D3 Security’s integration with SentinelOne offers an end-to-end solution for incident response teams. The video below shows an example of ingesting threats from SentinelOne, triaging them through Smart SOAR’s event playbook, then enriching and responding to escalated events. Out-of-the-box, Sm...

Experience the Future of SecOps with D3’s Smart SOAR at RSAC 2023

RSA Conference ,
SOAR

by Shriram Sharma - April 10, 2023

In a world where many SOC teams deal with 10,000+ alerts a day, a whack-a-mole approach to incident response just won’t do. With nation-state-backed threat actors and a growing attack surface posing new challenges, understaffed SOC teams are struggling to keep up. And while basic SOAR solutions can ...

We Implemented Smart SOAR at a Giant MDR Provider. Here’s What We Learned

Case Studies ,
SOAR

by Shriram Sharma - April 6, 2023

One of D3’s biggest recent implementations was our SOAR deployment at a global MDR vendor with thousands of customers worldwide. We even wrote a case study about it, highlighting how this MDR provider needed to upgrade its SOAR platform to keep pace with its growth and advanced technical requirement...

Why Smart SOAR is the Best SOAR for Microsoft Defender for Endpoint

Integration Guide ,
SOAR

by Pierre Noujeim - April 5, 2023

In the fast-paced world of cybersecurity, security teams must continuously adapt to protect their organization’s digital assets. Streamlining and automating incident response processes is essential for effective defense against threats. One way to achieve this is by integrating powerful cybers...

Leverage Your Microsoft Stack to Shut Down Phishing Campaigns in Seconds

Integration Guide ,
SOAR

by Pierre Noujeim - March 27, 2023

Phishing attacks continue to be a major threat to organizations of all sizes, with cybercriminals becoming increasingly sophisticated in their methods. As a result, security teams are faced with the daunting task of investigating and responding to a growing number of phishing alerts. Fortunately, au...

How MSSPs can Serve their First 50 Clients with One SOAR Playbook

MSSPs ,
SOAR

by Pierre Noujeim - March 21, 2023

What MSSP Customers Say About D3 “D3 is giving a much better possibility for our business to grow, so even though we are rapidly growing, we’ll be able to scale up to a lot more customers without adding more staff.” —Philip Lyngø, Security & Analytics Manager, Trifork Security “It was really on ...

Respond to Trojan Alerts in Seconds with SentinelOne, VirusTotal, and Azure Active Directory

Integration Guide ,
SOAR

by Pierre Noujeim - March 17, 2023

In this post, we’ll be using SentinelOne, VirusTotal, and Azure Active Directory to investigate and respond to a potential trojan virus. SentinelOne provides deep enrichment on the endpoint, VirusTotal will tell us if the file has been marked as malicious by the wider community, and Azure Active Dir...

Why D3 Smart SOAR is a Security Trailblazer

SOAR

by Shriram Sharma - March 16, 2023

In case you haven’t heard the news, D3 Security has been selected as a finalist in the Security Trailblazer category for the 2023 Microsoft Security Excellence Awards presented by the Microsoft Intelligent Security Association (MISA). The Security Trailblazer award recognizes companies that are lead...

D3’s Smart SOAR is the Best SOAR for CrowdStrike. Here’s Why

Integration Guide ,
SOAR

by John Xing - March 15, 2023

As cyber attacks become more sophisticated and frequent, organizations must ensure that they have a robust security system in place. CrowdStrike Falcon and D3 Smart SOAR (Security Orchestration, Automation and Response) are two such systems that work together to provide comprehensive protection agai...

Playbook Breakdown: Cross-Stack Analysis with CrowdStrike, Zscaler, and Active Directory

SOAR

by Pierre Noujeim - March 10, 2023

In this post, we explore how CrowdStrike, Zscaler, and Active Directory can be used in one playbook to investigate and respond to a remote file download and launch alert. By combining the three tools (EDR, zero trust, identity management) into a single playbook, users can make the most of intelligen...

D3 Security Recognized as a Microsoft Security Excellence Awards Finalist for Security Trailblazer

News ,
SOAR

by Walker Banerd - March 8, 2023

Vancouver, BC—March 8, 2023—D3 Security today announced it is a Security Trailblazer award finalist in the Microsoft Security Excellence Awards. The company was honored among a global field of industry leaders that demonstrated success across the security landscape during the past 12 months. “We are...

Attract and Retain Customers with the Ultimate MSSP Client Portal

MSSPs ,
SOAR

by Shriram Sharma - March 7, 2023

Update, April 24 2023: the MSSP Client Portal is now available. We’re excited to announce that D3’s Smart SOAR will soon ship with a built-in client portal that provides managed security service providers (MSSPs) with an easier way to manage their relationships with clients. The client portal ...

AI-Assisted Kill Chain Investigation with ChatGPT and Smart SOAR

Integration Guide ,
SOAR

by Pierre Noujeim - March 6, 2023

As cyber threats continue to grow in sophistication and frequency, security teams are under immense pressure to detect and respond to incidents quickly and effectively. With the volume of alerts generated every day, analysts can easily become overwhelmed and fatigued. This is where automation and ar...

“Dumb SOAR” Is Failing Its Customers. Are You One of Them?

SOAR

by Alex MacLachlan - March 2, 2023

While cybersecurity spending is on the rise, security leaders also have higher expectations from their product suppliers and service providers. For example, Managed Security Services Providers (MSSPs) once focused on basic management of a customer’s tools, but today’s service offerings include detec...

Transform Incident Response with Smart SOAR and Microsoft Sentinel

SIEM ,
SOAR

by Alex MacLachlan - February 8, 2023

D3’s Smart SOAR has a deep integration with Microsoft Sentinel. This integration gives security teams the ability to triage, investigate and respond to Sentinel alerts and Sentinel incidents, in the consolidated, automation-powered D3 work space. Events from Microsoft Sentinel and any other products...

Security Automation Explained: A Guide for Beginners

SOAR

by Shriram Sharma - February 3, 2023

Cyber attacks are becoming more frequent and advanced these days, carried out by criminal groups offering “ransomware-as-a-service” and nation-state-backed threat groups. To highlight this trend, let’s examine the phishing attack vector, which is the most popular attack technique f...

[Video] Trifork Security on How Smart SOAR Helps Streamline Operations

MSSPs ,
SOAR

by Shriram Sharma - January 17, 2023

We’re thrilled to share this testimonial from the SOC leadership team at Trifork Security. Headquartered in Denmark, Trifork Security offers managed and consulting services that help its customers prevent, detect, and respond to security threats. Like many other MSSPs, the firm has found great succ...

SOAR Use Case: Identity Management

SOAR

by Shriram Sharma - January 11, 2023

For SOC teams, it might seem like the new year brings the same security challenges, but we’re not just recycling last year’s SOAR playbooks. We’ve got a fabulous new whitepaper to ensure a stress-free 2023 for your team, with three SOAR playbooks that go beyond the SOC and tackle cross-t...

D3’s Roadmap Highlights for 2023: Machine Learning and More

SOAR

by Walker Banerd - December 23, 2022

2022 was a momentous year for D3 Security, but we’re always looking to the future. We are committed to being leaders, not followers, in the SOAR industry, and with than in mind we have laid out a plan for 2023 that might be our most ambitious roadmap yet. The next year of D3 Smart SOAR […]...

Video: VerSprite on the Importance of Vendor-Agnostic SOAR

SOAR

by Shriram Sharma - December 14, 2022

At D3 Security, we are truly passionate about our independent SOAR platform and believe it is the best solution for enterprises and MSSPs. But there’s no better way to validate our value than a customer testimonial. Meet VerSprite, a renowned cybersecurity threat management firm and service provider...

How To Detect and Mitigate Malicious Insider Threats With Smart SOAR

SOAR ,
White Papers

by Shriram Sharma - December 9, 2022

Cybersecurity is not just about protecting the organization from external threats, but also about securing it from insider threats. Yet, the latter can be a blind spot for many organizations. Large, mature organizations usually have an insider threat mitigation program in place, and with good reason...

Buy Smart SOAR Through Microsoft Azure Consumption Commitment (MACC)

SOAR

by Shriram Sharma - November 22, 2022

As many of you may know, Smart SOAR is available through the Microsoft Azure Marketplace. As 2022 comes to an end, here’s a timely reminder that you can use any remaining balance from your Microsoft Azure Consumption Commitment program to purchase Smart SOAR on the Azure Marketplace. What is the MAC...

Looking for the SOAR Magic Quadrant? Start Here

Reports ,
SOAR

by Shriram Sharma - November 18, 2022

If you came here looking for the Gartner Magic Quadrant for SOAR (Security Orchestration, Automation and Response), let’s get the spoilers out of the way first. No, there isn’t one yet. It doesn’t exist at the time of writing this post. If Gartner releases one, we’ll make sure to update this post an...

Meet D3 Security at the Cyber Security & Cloud Expo Global 2022

Events ,
News
SOAR

by Shriram Sharma - November 10, 2022

D3 Security is excited to announce its participation at the Cyber Security & Cloud Expo Global, which promises to be the biggest event of its kind in the UK. Thousands of cybersecurity and cloud professionals from across the world are expected to attend, connect, and share insights. We hope you ...

Find Threats Faster Together with Elastic & D3 Smart SOAR

SOAR

by Shriram Sharma - November 8, 2022

We’ve received a great response for our upcoming webinar with Elastic on November 16th and seats are filling up fast. Many of our customers use D3 Smart SOAR’s integration with Elastic, which is no surprise considering it is the most popular enterprise search engine. The webinar is a great opportun...

Why Independent SOAR Beats SIEM With Integrated SOAR

SIEM ,
SOAR

by Severin Collins - November 2, 2022

The 2022 edition of the Gartner® Magic Quadrant™ for Security Information and Event Management (SIEM) includes SOAR among the four capabilities. Threat intelligence platform (TIP), user and entity behavior analytics (UEBA), and long-term data storage and reporting (greater than 365 days) are the oth...

5 Key Benefits of SOAR (Security Orchestration Automation and Response)

SOAR

by Shriram Sharma - October 21, 2022

A recent survey revealed that up to 90 percent of companies were hit by ransomware in 2022. In the wake of such unrelenting attacks, often perpetrated by state-sponsored threat actors, spending on new cybersecurity technologies is usually on the top of mind for every CISO and security manager. But n...

Join D3’s Keynote Session at the KuppingerCole CSLS 2022

Events ,
News
SOAR

by Shriram Sharma - October 6, 2022

The KuppingerCole Cybersecurity Leadership Summit (CSLS) is a premier event for cyber leaders of security teams to learn about the most pressing security issues facing their organizations. The conference takes place in November in Berlin. D3 Security is proud to be a Gold Sponsor for the conference,...

Why Smart SOAR Is the World’s Leading Independent SOAR Platform

SOAR

by Shriram Sharma - September 20, 2022

SOC leaders have long embraced this fact: security is growing in complexity faster than they can keep up using manual processes. SOAR (Security Orchestration, Automation and Response) emerged as a product category in cybersecurity to address this pain point. SOAR helps security operations teams auto...

SOAR Rated “High Benefit” in Gartner® Hype Cycle for SecOps 2022

Industry ,
Reports
SOAR

by Shriram Sharma - September 7, 2022

We’re excited to announce that D3 Security has been named as a Sample Vendor in the SOAR (Security Orchestration, Automation and Response) category in Gartner’s latest Hype Cycle for Security Operations 2022 report. There are many SOAR vendors these days, so we’re pleased to see that D3 Security is ...

Why Smart SOAR Is the Best Automation Solution for MSSPs

SOAR

by Shriram Sharma - August 26, 2022

The market for managed security services is booming. Many analyst groups are projecting double-digit percentage growth in the sector annually. Yet many are struggling to keep up with high alert volumes when relying heavily on manual processes to manage a growing customer base with limited resources...

D3 Security & Zscaler Present: Reduce Cyber Risk with SASE & SOAR

SOAR

by Shriram Sharma - August 16, 2022

The term “zero trust” was first coined in 1994, which makes it as old as the internet. However, the zero trust security model as we know it today was first described in 2010 by Forrester analyst John Kindervag. That makes it five years older than SOAR (security orchestration, automation and response...

See Smart SOAR in Action at Black Hat 2022

Events ,
SOAR

by Shriram Sharma - August 5, 2022

We’re thrilled to announce that we will be presenting our Smart SOAR platform at the Microsoft booth (#2340) at Black Hat USA 2022. On Thursday the 11th at 1 PM PST, D3 Security’s Tom Byrne will demonstrate how to enhance security incident response by leveraging Smart SOAR’s deep integrations with M...

How Does SOAR Fit in an EDR-centric SOC?

SOAR

by Shriram Sharma - July 22, 2022

If you’ve worked in a security operations center (SOC) that has an endpoint detection and response (EDR) platform, you know the value it can add to your incident response capabilities. A SIEM-centric SOC model was more popular in the past, but as EDR tools have improved, more companies are becoming ...

How SOAR Automation Can Mitigate the Cybersecurity Talent Crunch

SOAR

by Shriram Sharma - July 6, 2022

The cybersecurity talent shortage is not just a problem in enterprises; it is a problem at every size of company. And while some might attribute the shortage to market hype, there’s an abundance of research data to prove it. We’ll lean on the most authoritative sources to underscore this. Cyberseek,...

What is a SOAR Playbook?

SOAR

by Shriram Sharma - June 30, 2022

A playbook is a structured strategy procedure for handling any situation. The first known usage of the word goes back to 1511 AD, predating Shakespeare. Playbooks are commonly associated with sports, particularly football, though the term is used frequently in other realms. In the context of cyberse...

RSA 2022 Recap: Key Trends and Frequently Asked Questions

Events ,
RSA Conference
SOAR

by Shriram Sharma - June 14, 2022

RSA Conference is the ‘Super Bowl’ of cybersecurity expos, where the world’s leading security professionals gather to share their knowledge and help shape the future of infosec. After a gap year, this year’s conference was a good comeback, with over 26,000 attendees, and plenty of interesting sessio...

Level up your SecOps with Smart SOAR at Splunk .conf22

Events ,
SOAR

by Shriram Sharma - May 27, 2022

We’re psyched to meet security leaders from across the globe next month at Splunk’s .conf22 at the MGM Grand in Las Vegas on June 13-16. This year’s in-person conference also includes the option to join virtually, so Splunkers from around the world can watch the all the sessions remotely, access the...

Why MITRE Calls SOAR “Indispensable” in its Latest Book

MITRE ATT&CK ,
SOAR

by Shriram Sharma - May 19, 2022

MITRE Corp’s recently published book, 11 Strategies of a World-Class Cybersecurity Operations Center, is a must-read for security operations center (SOC) teams and just about anyone interested in infosec. The book is written for professionals who work in a SOC, but applies to any security operations...

How SOAR Can Help You Attract and Retain Cybersecurity Talent

SOAR

by Shriram Sharma - May 12, 2022

Security operations center (SOC) teams play a vital and underappreciated role in the function of any organization, but they are especially crucial in many sectors — including finance, technology, and healthcare. Members of SOC teams work around the clock and are responsible for keeping the company s...

What’s the Difference Between SOAR and SAO?

SOAR

by Shriram Sharma - May 3, 2022

Security Orchestration, Automation and Response (SOAR) is a relatively new product category – in fact, it just turned five. Research and consulting firm Gartner is credited with coining the term around April 2017, judging by the earliest web artifacts that we found on Google. Great minds think alike...

D3 Security Gives MSPs the Superpower to Become MSSPs

MSSPs ,
SOAR

by Shriram Sharma - April 28, 2022

The days when a managed service provider’s (MSP) role was just to provide support services are long gone. As cyber-threats continue to evolve, MSPs are moving beyond the call desk and becoming security specialists themselves. The cybersecurity industry is a dynamic space and an increasingly importan...

Automate Vulnerability and Threat Management with D3 & ThreatWorx

SOAR

by Walker Banerd - April 12, 2022

It’s no use knowing about vulnerabilities in your environment if you don’t have the resources to quickly turn that knowledge into action. It may sound obvious, but vulnerabilities often stay unresolved much longer than they need to, even when the fix is simple. Communicating what needs to be fixed a...

How D3 Can Help Security Leaders Converge Cyber and Physical Security Operations

Physical Security ,
SOAR

by Shriram Sharma - March 24, 2022

A hacker breaks into a Florida town’s water supply and tries to poison it with lye. That’s not a fictional tale from a Hollywood script – that’s an actual news story in the Washington Post from a year ago. Fortunately, an operator was watching the attack unfold from his desk at the water treatment p...

D3’s Event Pipeline is the Perfect Example of Gartner’s ‘Hyperautomation in Security’

SOAR

by Shriram Sharma - March 14, 2022

We recently published a whitepaper about our Event Pipeline, which is sort of like the nerve center of our SOAR platform. In case you haven’t heard of it, the Event Pipeline is D3 NextGen SOAR’s global event playbook. It leverages unlimited out-of-the-box integrations to enable triage, investigation...

The Time for SOAR is Now

SOAR

by Shriram Sharma - March 9, 2022

For a term that was only coined less than five years ago, SOAR (security orchestration, automation, and response) has matured significantly to a point where it has become table stakes for a modern SOC. SOAR helps security teams cope with several challenges, including information overload from a delu...

How D3 and ZeroFox Enable Proactive Threat Hunting and Automated Brand Protection

SOAR

by Walker Banerd - March 4, 2022

One of the great things about SOAR is that it can make powerful tools even more powerful, by integrating them into end-to-end, automated workflows. One such tool is ZeroFox, a full-spectrum threat intelligence and digital risk protection (DRP) platform. ZeroFox is an important technology partner of ...

ICYMI: Highlights From the Webinar with Forrester’s Allie Mellen on the Future of SOAR

SOAR

by Shriram Sharma - March 1, 2022

Our recent webinar with Forrester’s Allie Mellen and D3 Founder Gordon Benoit featured a fascinating debate and discussion on the state and future of SOAR. In case you prefer to read rather than watch or listen, we’ve transcribed the most important parts of their exchange below. Read on for Allie a...

SIEM vs. SOAR: How they Differ and Why they Work Well Together

SOAR

by Walker Banerd - January 26, 2022

There has always been some confusion around the distinctions between SIEM (security information and event management) and SOAR (security orchestration, automation, and response), which has been made worse in the past few years as some SIEM vendors have purchased SOAR companies in order to incorporat...

Webinar: Forrester and D3 Debate the Future of SOAR

News ,
SOAR

by Walker Banerd - January 21, 2022

We have an upcoming webinar on February 16th that anyone with an interest in cybersecurity is not going to want to miss. You may have seen the news earlier this month that Google acquired SOAR vendor Siemplify. This prompted Forrester’s Allie Mellen—a prominent security expert—to write an article wi...

Hyperautomation: One of Gartner’s Emerging Security Trends

Reports ,
SOAR

by Walker Banerd - January 19, 2022

Gartner recently published the latest edition of its Emerging Technologies and Trends Impact Radar for security (Gartner, Emerging Technologies and Trends Impact Radar: Security, Ruggero Contu, Mark Driver, Lawrence Pingree, Elizabeth Kim, John A. Wheeler, Swati Rakheja, Nat Smith, Mark Wah, Dave Me...

Guides to SOAR for Different Security Roles

SOAR

by Walker Banerd - December 3, 2021

We recently published three guides to SOAR (security orchestration, automation, and response) that are each specialized to a specific audience. The three audiences are security operations center (SOC) analysts, chief information security officers (CISOs), and managed security service providers (MSSP...

How SOAR Can Help You Solve Cybersecurity Staffing Issues

SOAR

by Walker Banerd - November 5, 2021

Even before the pandemic completely reshaped the world of recruiting with an explosion of remote work, it was always hard for most employers to attract and retain qualified cybersecurity professionals. Security pros are in high demand, expensive to hire, and—in the average security operations center...

How to Turn the Lessons of Elite SpecOps into Elite SecOps

SOAR

by Walker Banerd - September 28, 2021

We recently published a new whitepaper titled, How the Principles of the Navy SEALs Can Improve Your Use of SOAR, which you can download here. In the whitepaper, we break down four components of the ethos that allows the Navy SEALs to achieve their goals at a level that is virtually unmatched by any...

Top SOAR Playbooks for 2022

SOAR

by Walker Banerd - September 23, 2021

In the never-ending fight against cyber criminals, effective SOAR playbooks are one of the most valuable weapons in a security team’s arsenal. Whether they’re pre-built by the SOAR vendor, or honed over time based on internal experience, playbooks can standardize effective responses to common incide...

The Security Implications of Remote Work

SOAR

by Walker Banerd - September 13, 2021

The shift toward broader acceptance of remote work is undeniable, and no longer tied to the acute dangers of the coronavirus pandemic. It is unclear where the level of remote work will stabilize in the coming years, but it seems very likely to stay much higher than the pre-2020 level. Many major com...

Why XDR is Not a Replacement for SOAR

SOAR

by Walker Banerd - September 3, 2021

Extended Detection and Response—commonly abbreviated to XDR—was first coined in 2018 and has since become an exciting buzzword in the cybersecurity world. Many vendors now offer XDR, which combines several of their products into one integrated offering. XDR grew out of Endpoint Detection and Respons...

How adding SOAR turned ineffective MSSP into valuable asset

Case Studies ,
SOAR

by Walker Banerd - July 5, 2021

The relationship between in-house security teams and managed service providers is becoming more complex. With the emergence of MDR, companies are able to outsource more of their incident detection and response. Whether you’re working with an MDR or MSSP, optimizing the value you get from your securi...

The Impact of D3 Smart SOAR on the Modern SOC

SOAR

by Walker Banerd - May 12, 2021

The modern SOC is moving beyond alert-handling. The overwhelming number of alerts created by the myriad tools in the average SOC has become unmanageable. This has left most alerts uninvestigated, because there simply isn’t time to validate every threat. Advanced attackers know this and can purposefu...

MSSP, MDR & the Future of SOAR

Reports ,
SOAR

by Walker Banerd - April 22, 2021

In the managed security services market, the well-established Managed Security Service Provider (MSSP) model is facing a challenge from the emerging Managed Detection and Response (MDR) model. While each provider offers their own set of services, there are some general differences between the two, a...

D3’s Upcoming Release is a Launchpad for SOAR Integrations

SOAR

by Walker Banerd - March 15, 2021

Integrations are critical to the effectiveness of any SOAR platform, so delays or obstacles to the configuring, testing, and executing of commands between tools can compromise a SOAR implementation before it can get fully up and running. This is an area in which many SOAR platforms struggle. Setting...

KuppingerCole Names D3 an Overall Leader in SOAR Report

Reports ,
SOAR

by Walker Banerd - February 12, 2021

The European analysts KuppingerCole have released their Leadership Compass for Security Orchestration Automation and Response, a comprehensive look at the SOAR marketplace and vendor capabilities. Their extensive analysis of 12 SOAR vendors ranks the leaders in key areas, based on deep evaluation cr...

Test and Optimize Your Security Controls with D3 and AttackIQ

SOAR

by Walker Banerd - February 11, 2021

We are constantly adding new integrations to the list of 300+ tools with which D3 works to automate and orchestrate security operations. One of the most exciting technology partnerships we’ve formed in recent months has been with AttackIQ, a security optimization platform that provides a unique serv...

Year in Review Part 2: The SOAR Industry in 2020

SOAR

by Walker Banerd - January 8, 2021

In this second installment of our 2020 review, we’ll look back at three industry reports that were published in 2020. We’ll see what each one had to say about D3 NextGen SOAR, as well as the SOAR industry overall. Gartner’s SOAR Market Guide D3 was included as a representative vendor in...

Year in Review Part 1: D3 Highlights From 2020

SOAR

by Walker Banerd - January 5, 2021

2020 was challenging for everyone, and of course we felt that at D3 as we adjusted to new conditions throughout the year. Fortunately, however, we were still able to thrive and move our plans forward, despite the challenges, setting us up for a 2021 that we expect to be the best year in our long [&h...

SunBurst Playbooks for the SolarWinds Breach

SOAR

by Alex MacLachlan - December 23, 2020

The SolarWinds supply chain compromise has sprung nearly every security team into action in the past week as they try to determine whether any hosts on their network are running the Orion network monitoring software. Moreover, they are checking—and double-checking—for other signs of malicious activi...

Three Reasons Why You Need an Independent SOAR Vendor

SOAR

by Walker Banerd - November 17, 2020

As the market for security orchestration, automation, and response (SOAR) platforms has exploded in the past few years, many SOAR vendors have been acquired by larger technology companies. Others have stayed independent. This split has added a new factor for SOAR buyers to consider, as Gartner cover...

D3 Strengthens Cloud Security Partnerships for Security Automation at Scale

SOAR

by Walker Banerd - November 3, 2020

Cloud security is becoming an increasingly important aspect of organizations’ overall security posture, but cloud security tools don’t always fit seamlessly with locally hosted security stacks. As SOAR moves into its next generation, it needs to be the solution that unites cloud and locally hosted s...

What’s New in the Latest Version of D3 Smart SOAR

SOAR

by Walker Banerd - October 23, 2020

We are always making improvements to our Smart SOAR platform, and we recently released a major new update for all of our clients. There are a lot of exciting updates, which can be summarized in a few key themes: Simpler integrations and playbooks. We’ve completely overhauled our playbook editor to m...

The Top 10 Reasons Organizations are Choosing D3 SOAR Over its Competitors

SOAR

by Walker Banerd - October 6, 2020

The D3 customer base has been growing rapidly, especially in the past couple of years. Major new clients are signing on, existing clients are expanding their services, and our partners around the world are having great success connecting D3 with their clients. It’s been an exciting time. While the S...

8 Things Gartner Gets Right About SOAR (And 1 Thing They Get Wrong)

Reports ,
SOAR

by Alex MacLachlan - September 30, 2020

Gartner’s 2020 Market Guide for Security Orchestration, Automation and Response Solutions (Lawson, Bussa & Sadowski, September 21, 2020) was only released a few days ago, but it’s already become one of the most sought-after resources for security professionals evaluating SOAR. You can download y...

Cyber Incident Response and Beyond: 6 Ways D3 Helps You Manage the Full Scope of an Incident

Compliance ,
Forensics
Human Resources
Incident Response
SOAR

by Walker Banerd - September 21, 2020

Many SOAR platforms do a good job automating actions through playbooks that cover the basic security tasks needed to remediate simple threats. However, D3 has been in the incident response game since long before the acronym SOAR was even coined, and we have learned in our years of working with many ...

5 Ways D3 SOAR Can Help You Prioritize Incidents

SOAR

by Walker Banerd - July 28, 2020

In almost any SOC, there are more incidents than can be properly investigated. Even with effective rules in your SIEM and other detection tools that rule out the majority of false positives and low-risk events, incident responders are still often overwhelmed with a never-ending queue. SOAR can bring...

D3 Joins the Microsoft Intelligent Security Association

News ,
SOAR

by Walker Banerd - July 24, 2020

The fight against sophisticated cybersecurity threats requires collaborative effort between the best minds in the industry. That’s why we’re pleased to announce that D3 Security has joined the Microsoft Intelligent Security Association (MISA), a group of technology providers who have integrated thei...

D3 Appoints Spire Solutions as Distributor of Smart SOAR in Middle East and Africa

News ,
SOAR

by Walker Banerd - June 29, 2020

D3 Security, provider of the leading next-generation SOAR platform, today announced it has appointed Spire Solutions, the Middle East’s preferred security partner, as a value-added distributor in the Middle East and Africa. Under this partnership, Spire Solutions will support the distribution of D3 ...

D3 and Check Point Partner to Help Customers Respond to the Next Generation of Cyber Threats

News ,
SOAR

by Walker Banerd - June 25, 2020

Vancouver, BC—June 25, 2020—D3 Security, the leader in next-generation security orchestration, automation and response (SOAR), today announced a new partnership with Check Point Software Technologies Ltd., a leading provider of cyber security solutions globally, to help security teams automate and o...

Three Reasons to Get Excited About D3’s Partnership with Datadog

SOAR

by Walker Banerd - June 12, 2020

We are very happy to announce our new partnership with Datadog, the essential monitoring platform for cloud applications. Datadog brings together data from servers, containers, databases, and third-party services to make customers’ stacks entirely observable. With 85% of enterprises moving their app...

Does D3 Integrate With My Security Tools? (Fortinet, McAfee, Symantec, CrowdStrike, Splunk, and More)

SOAR

by Walker Banerd - June 5, 2020

Integrations are critical to the value you will get out of a SOAR platform. You’ll want a platform that integrates with the security tools you use of course, but not all integrations are created equal, so you’ll also want to ensure that those integrations are feature-rich and don’t require you to do...

MITRE ATT&CK For Dummies

MITRE ATT&CK ,
SOAR

by Walker Banerd - May 7, 2020

Everyone knows the “For Dummies” series of books. In fact, I’d wager you’ve read several over the years when you needed to learn about a new topic in an accessible but informative way. I know I have. That’s why I’m excited to announce that D3 has teamed up with the folks behind the “Dummies” books [...

What is Hybrid Cloud Security?

Industry ,
SOAR

by Walker Banerd - March 27, 2020

Hybrid Cloud Security describes the unique process of applying cybersecurity tactics and methods to environments that are split across multiple types of cloud resources. Typically, hybrid cloud environments include are a private cloud, which a company generally operates and hosts on-premise, and a p...

Next-Generation SOAR: Codeless Playbooks and Integrations

SOAR

by Walker Banerd - January 31, 2020

Nearly all security operations centers (SOCs) with SOAR have learned that their playbooks and integrations require more maintenance than expected. That’s because SOAR playbooks must be manually updated, often using Python, whenever a data source or integration point changes. If your SOC has dozens o...

Why Integrations are Easier with D3 SOAR

SOAR

by Walker Banerd - January 23, 2020

While SOAR platforms can do a lot of things, their effectiveness will be largely contingent on how well they integrate with their clients’ security infrastructure. That’s why D3 integrates with more than 260 applications in order to orchestrate more than 400 different actions. Integrating with D3 ha...

D3 SOAR 2.0 Release Announcement

MITRE ATT&CK ,
News
SOAR

by Walker Banerd - January 15, 2020

We are proud to announce the release of our most ambitious and innovative project yet: D3 SOAR 2.0. While it may be a bold claim to make, we truly see this new release as pushing the SOAR market forward with both improvements to previous capabilities and entirely new capabilities that no other platf...

3 Things You Can Do With Next Generation SOAR That You Couldn’t Do Before

MITRE ATT&CK ,
SOAR

by Walker Banerd - January 10, 2020

When you’ve been in the industry as long as D3, you see a lot of evolution in software capabilities. In the early years, it was all about incident response and case management. Playbooks were entirely manual, and integrations were a secondary aspect of the solutions on the market at that time. Next,...

Common Obstacles to Leveraging MITRE ATT&CK and How D3 Can Help

MITRE ATT&CK ,
SOAR

by Walker Banerd - December 21, 2019

It is widely agreed upon in the security world that the MITRE ATT&CK Framework is a valuable tool for security teams to wield in their never-ending fight against sophisticated adversaries. Among other benefits, ATT&CK brings “behavior-based” (as opposed to “signature-based”) detection into t...

How MITRE ATT&CK Enhances Gartner’s Value Categories of SOAR Solutions

MITRE ATT&CK ,
SOAR

by Walker Banerd - December 13, 2019

Toward the end of 2018, Gartner published its Emerging Technology Analysis of SOAR solutions (Ahm, December 7, 2018). In this piece, the author laid out three “value categories” for SOAR that represent the different varieties of value of which all SOAR solutions offer some combination. In the year s...

5 Takeaways from D3’s “SOAR in the Real World” Survey

SOAR

by Walker Banerd - November 14, 2019

D3 recently teamed up with Virtual Intelligence Briefing (ViB), an online community of more than one million technology professionals, to conduct a detailed survey about how SOAR technology is used and perceived by the people on the front lines of cybersecurity. Our sample included hundreds of secu...

Where to Start With Incident Response Automation

SOAR

by Walker Banerd - November 1, 2019

Lots of valuable opportunities for incident response automation are available to security teams, especially when leveraging a SOAR platform. While most security teams are already using some amount of automation, extensive automation in the SOC is still quite rare. In fact, we confirmed this in a rec...

Why Do I Need SOAR if I Have… (SIEM, ITSM, TIP, EDR)

SOAR

by Walker Banerd - October 17, 2019

As a relatively new category of security tools, there are lots of misconceptions around Security Orchestration, Automation, and Response (SOAR). Some of this confusion is around what types of SOCs will benefit most from SOAR. It is understandable to think that a SOC that already has numerous securit...

How to Leverage MITRE ATT&CK in Your Security Operations with D3 SOAR

MITRE ATT&CK ,
SOAR

by Walker Banerd - September 27, 2019

The MITRE ATT&CK matrix has gained widespread recognition in the security industry for its valuable data on adversary groups, and the tactics and techniques they use to target organizations. However, there is a gap between recognizing the value of this data and being able to leverage it for impr...

4 SOAR Purchasing Mistakes to Watch Out For

SOAR

by Walker Banerd - September 20, 2019

Purchasing a security orchestration, automation, and response (SOAR) platform is a major decision. If you make the right choice, this powerful technology can become the heart of your security operations, intaking data from across your environment and orchestrating workflows to shut down threats. Ho...

How SOAR Can Help Support the Transition of IT Staff to Security Operations

SOAR

by Walker Banerd - August 8, 2019

Because of the well-documented cybersecurity skills gap, it has become a significant trend for organizations to rely on IT personnel to transition to security operations or to take on additional security responsibilities. This is a difficult transition for both the employees and the organization tha...

Assessing and Demonstrating the Value of Security Automation Platforms

SOAR

by Walker Banerd - July 24, 2019

It’s easy for the people on the front lines of security operations to see how adding security automation makes their lives easier and their organizations safer. However, SOC managers still need to be able to quantify the value of automation to senior executives and other stakeholders through SOAR re...

Why Incident Response Must Adopt a Kill Chain Perspective—SecurityWeek

SOAR

by Walker Banerd - July 19, 2019

A new article by Stan Engelbrecht, Director of D3’s Cyber Security Practice, is currently featured on SecurityWeek. Emerging technology is enabling incident response tools—including SOAR platforms like D3—to go beyond individual alerts and address complex attacks holistically. This welcome change re...

Download Gartner’s 2019 Market Guide for SOAR Solutions

SOAR

by Walker Banerd - July 10, 2019

Note: Download the 2019 Gartner Market Guide for Security Orchestration, Automation and Response Solutions here. Gartner recently published its first ever Market Guide for Security Orchestration, Automation and Response Solutions, written by Claudio Neiva, Craig Lawson, Toby Bussa, and Gorka Sadowsk...

Security Operations Gap Analysis with MITRE ATT&CK

SOAR

by Walker Banerd - July 5, 2019

The MITRE ATT&CK framework is rapidly growing in popularity among security leaders for many reasons. Among the numerous applications of ATT&CK, many companies are using ATT&CK to identify gaps in their security and what they have covered with their existing tools. For those who are unfam...

SANS Automation & Integration Survey: Closer Collaboration Enables More Automation

Incident Response ,
SOAR

by Walker Banerd - June 20, 2019

D3 recently sponsored the 2019 SANS Security Automation & SOC Integration Survey. The detailed survey compiled responses from 218 professionals involved in cybersecurity practices. The survey is an excellent resource that provides insight into how security automation is perceived, how organizati...

How D3 Uses the MITRE Framework to Enhance Phishing Investigations

Incident Response ,
SOAR

by Walker Banerd - May 31, 2019

To empower organizations in the fight against advance persistent threats and sophisticated adversaries, SOAR platforms must evolve beyond the linear process of ingesting alerts and automating simple response actions. This is why D3 has fully embedded the MITRE ATT&CK framework into its SOAR plat...

D3 Supports Every Tier of SOC Analysts

Incident Response ,
SOAR

by Walker Banerd - May 17, 2019

In a security operation center (SOC), analysts are often categorized into four tiers, each with different roles and responsibilities. The definition of each tier varies a bit, depending on who you ask, but a generally accepted description of a Tier 1 analyst would be someone who monitors alerts from...

2019 SANS Automation & Integration Survey: 5 Misconceptions About Security Automation

Industry ,
SOAR

by Walker Banerd - May 10, 2019

Level the Playing Field with MITRE ATT&CK—SecurityWeek

SOAR

by Walker Banerd - May 4, 2019

A new article by Stan Engelbrecht, Director of D3’s Cyber Security Practice, is currently featured on SecurityWeek. The MITRE ATT&CK framework is rapidly gaining adoption as a valuable way for security teams to categorize, predict, and disrupt adversaries’ actions. That’s why D3 has embedded the...

10 of the Best Open Source Threat Intelligence Feeds

SOAR

by Walker Banerd - April 30, 2019

In our quest to help security operations and incident response teams work more effectively, we’ve created a list of the top 10 open source threat intelligence feeds. Each threat feed listed here integrates seamlessly with our award-winning Smart SOAR platform, as do dozens of the top enterpris...

SOAR for Fortinet: Why D3 is the Perfect Fit

SOAR

by Walker Banerd - April 23, 2019

Security orchestration, automation, and response (SOAR) platforms are a force multiplier in the SOC because of how they make other security tools more effective. This is especially true when you combine D3 SOAR with the Fortinet Security Fabric. With this unique partnership, you don’t just get certi...

How D3 Uses the MITRE ATT&CK Framework for Intelligent Correlation (VIDEO)

SOAR

by Walker Banerd - April 17, 2019

D3 SOAR is making the transition from event-based response to intelligent, intent-based response. This means that D3 users will be able to see every security event in the context of adversarial intent, by correlating events with other traces of the same attack. This allows security teams to take a m...

D3 Security Joins Symantec Technology Integration Partner Program

News ,
SOAR

by Alex MacLachlan - April 11, 2019

MOUNTAIN VIEW, Calif.– D3 Security today announced it has joined the Symantec Technology Integration Partner Program (TIPP), a global ecosystem composed of more than 100 participating technology companies, in a collaborative effort to combat cyber-crime and secure the cloud generation. As part...

Data Breach of the Month: Jackson County

Data Breach ,
SOAR

by Walker Banerd - April 8, 2019

Welcome back to our Data Breach of the Month series, where we look at a notable cyber incident or data breach from the past month. Sometimes we’ll offer deeper analysis of the latest state-sponsored mega breach, and other times we’ll focus on a lesser known incident that has outsized implications fo...

D3 Security and SANS Survey Illustrates the Need for Security Automation to Stabilize the Resource and Skills Gap

News ,
SOAR

by Alex MacLachlan - April 3, 2019

Vancouver, British Columbia – April 3, 2019 – D3 Security, an innovator in security orchestration, automation and response (SOAR) technology, today announced the results of the 2019 SOC Automation and Integration Survey, executed by SANS. The D3-sponsored study surveyed over 250 professionals with r...

Moving from Event-Based to Intent-Based SOAR Using the MITRE ATT&CK Framework

Incident Response ,
SOAR

by Walker Banerd - March 28, 2019

We recently published a whitepaper detailing D3’s vision for the future of SOAR, and how we’re making it a reality. We’re calling it SOAR 2.0, and while that might sound grandiose, we think it reflects how important this step in the evolution of SOAR could be. You can download the whitepaper here to...

SOAR Trends and Questions from RSAC 2019

Events ,
Incident Response
Industry
SOAR

by Alex MacLachlan - March 13, 2019

Just like at RSA Conference 2018, and 2017, it was great to connect with clients and partners at our booth and on the show floor this year, 2019. Some of the main differences this year were the sheer volume of clients we saw—which makes sense, since we closed deals with more than 50 Fortune 500 [&he...

D3 Security and Veracomp Partner to Provide SOAR Technology for Central and Eastern European Markets

News ,
SOAR

by Alex MacLachlan - March 12, 2019

Vancouver, British Columbia – D3 Security, a developer of award-winning security orchestration, automation and response (SOAR) solutions, today announced a strategic partnership with Veracomp, one of the largest IT distributors in Poland. Veracomp will play a key role in helping to expand the reach ...

Connect with D3’s SOAR Experts at RSA Conference 2019

Events ,
Incident Response
SOAR

by Alex MacLachlan - February 11, 2019

RSA Conference 2019, one of the cybersecurity world’s biggest events, is just a couple of weeks away, and our team is excited to return to San Francisco to show off our SOAR technology on the world stage. You can speak with our security orchestration experts and demo the D3 SOAR Platform at Booth #6...

Don’t Search for a Needle in a Haystack — SecurityWeek

Incident Response ,
SOAR

by Walker Banerd - February 8, 2019

A new article by Stan Engelbrecht, Director of D3’s Cyber Security Practice, is currently featured on SecurityWeek. The importance of threat intelligence to security operations is growing, as SOAR platforms and other tools get better and better at rapidly aggregating complex data from myriad sources...

5 Trend Reports Every SOC Should Track

Incident Response ,
Industry
SOAR

by Walker Banerd - January 14, 2019

By tracking specific metrics over time, trend reporting can establish a historical view of threats encountered, quantify SOC performance, and support smarter, more agile, and more data-driven incident response. Analyzing these reports can act as an early warning system to help identify threats and b...

Pitfalls (and Best Practices) of SOAR Implementation

SOAR

by Walker Banerd - January 3, 2019

Our recent webinar, How to Prepare for Cyber Security Orchestration, was designed to help security folks understand what is needed to prepare your SOC for security orchestration, automation, and response technology. For those who are further along in the process, many questions remain regarding impl...

What Makes D3 Playbooks Different

Incident Response ,
SOAR

by Walker Banerd - December 20, 2018

What Makes D3 Playbooks Different Incident response playbooks are needed to help enterprises respond effectively, consistently, and in line with security and compliance obligations. For many years, these playbooks were sets of manual, print-based documents. This often led to inconsistencies and the ...

D3 Security Integrates with McAfee Enterprise Security Manager (ESM)

Incident Response ,
News
SOAR

by Alex MacLachlan - December 4, 2018

VANCOUVER, British Columbia – D3 Security, an innovator in Security Orchestration, Automation and Response (SOAR) technology, today announced that it has achieved technical integration of the D3 SOAR Platform with the McAfee® Enterprise Security Manager (ESM), enabling accelerated threat detec...

Back to Basics: Incident Response Planning 101

Incident Response ,
SOAR

by Walker Banerd - November 5, 2018

A recent survey of 4,100 cybersecurity pros by the international insurance company Hiscox reported that 73% of organizations are unprepared for a cyberattack. That’s a startling statistic because the global enactment of strict regulations requires organizations to quickly identify security incidents...

Seven Security Activities You Should Automate — SecurityWeek

Incident Response ,
SOAR

by Walker Banerd - October 17, 2018

A new article by Stan Engelbrecht, Director of D3’s Cyber Security Practice, is currently featured on SecurityWeek. Security automation is often sold based on the promise of helping security teams save time and act faster. While these benefits are real, there are also many other use cases for automa...

D3 Named Top Security Automation Solution

Incident Response ,
News
SOAR

by Alex MacLachlan - October 2, 2018

VANCOUVER, British Columbia – D3 Security, a developer of award-winning security orchestration, automation and response (SOAR) solutions, today announced that they have been named CyberSecurity Breakthrough’s 2018 Security Automation Solution of the Year. This year’s competition drew over 3,00...

Preparing for SOAR: Join the Webinar from D3 and EMA

Incident Response ,
SOAR

by Walker Banerd - September 19, 2018

Security orchestration and automation aren’t just the future of security operations; they’re the present. If you aren’t already using these powerful technologies in your SOC, you’ll need to implement them soon. Are you prepared? Join experts from D3 and EMA for an exclusive webinar on how to prepare...

How Automation Helps Security Managers—SecurityWeek

Incident Response ,
SOAR

by Walker Banerd - September 12, 2018

A new article by Stan Engelbrecht, Director of D3’s Cyber Security Practice, is currently featured on SecurityWeek. It’s often discussed how automation benefits analysts , making them faster and better informed in their work. What gets talked about less is that security managers also get significant...

D3 Announces Certified Integration with McAfee ESM

SOAR

by Walker Banerd - August 27, 2018

We are pleased to announce that D3’s integration with McAfee Enterprise Security Manager (ESM) has been certified by McAfee. The integration brings together D3’s industry-leading security orchestration, automation, and response (SOAR) platform with McAfee’s powerful SIEM with a host of features to s...

Getting off the Ground with SOAR—SecurityWeek

Incident Response ,
SOAR

by Walker Banerd - August 17, 2018

A new article by Stan Engelbrecht, Director of D3’s Cyber Security Practice, is currently featured on SecurityWeek. Something we often hear from prospective customers is that they don’t have any substantial incident response program in place and are apprehensive about jumping straight into implement...

The Evolution of SOAR Platforms — SecurityWeek

Incident Response ,
SOAR

by Walker Banerd - July 30, 2018

A new article by Stan Engelbrecht, Director of D3’s Cyber Security Practice, is currently featured on SecurityWeek. D3 is part of an evolution in security operations platforms that is now commonly referred to as SOAR (security orchestration, automation, and response). Demand for SOAR is undeniably a...

Threat Intelligence Use Cases

Incident Response ,
SOAR

by Walker Banerd - July 18, 2018

Threat intelligence is becoming an increasingly prominent element of security operations. In fact, Gartner predicts a 15x increase in the number of large enterprises using commercial threat intelligence by 2020. Threat intelligence comes in many forms, with numerous vendors and several distinct use ...

SOAR Like An Eagle: The Key to Fast and Full-Lifecycle Incident Response

Incident Response ,
SOAR

by Alex MacLachlan - June 28, 2018

Senior Principal Analyst and ESG Fellow, Jon Oltsik, recently reported on security orchestration, automation and response (SOAR) platforms in two articles for CSO Magazine. You can read them here and here. Notably, Jon found that platforms like D3 Security are driving SOAR’s evolution, by combining ...

How Much Does a Data Breach Really Cost You?

Compliance ,
Data Breach
Incident Response
Industry
SOAR

by Alex MacLachlan - June 25, 2018

“If you protect your paper clips and diamonds with equal vigor, you will soon have more paper clips and fewer diamonds.” – Dean Rusk, former US Secretary of State Do you know how much your organization stands to lose if it were to suffer a data breach? Even the legendary Warren Buffet h...

How SOAR Makes a Security Analyst More Impactful

Incident Response ,
SOAR

by Walker Banerd - June 20, 2018

Security orchestration, automation, and response (SOAR) solutions are valuable for everyone on a security team, from people on the front lines to managers and executives tracking reports and metrics from a birds-eye view, or even compliance and legal personnel working outside the SOC. Of all the rol...

Infosec Europe 2018 Recap

Incident Response ,
SOAR

by Stan Engelbrecht - June 13, 2018

Last week, D3 sponsored the InfoSecurity Europe trade show at the Olympia in London. “InfoSec” is Europe’s top cyber security trade show, with every imaginable product and service represented, including our award-winning Security Orchestration, Automation, and Incident Response platform, known as SO...

Why Modern Manufacturers Need Cyber Incident Response

Forensics ,
Incident Response
Industry
SOAR

by Walker Banerd - June 12, 2018

Despite the constant news about cyber threats and the growth in major breaches, many companies are overly focused on prevention, while overlooking incident response and handling practices. With today’s environment of an increasing attack surface, numerous security tools, overworked analysts, and a n...

5 Strategies for Extending SOAR Beyond the SOC —SecurityWeek

Incident Response ,
SOAR

by Walker Banerd - June 11, 2018

A new article by Stan Engelbrecht, Director of D3’s Cyber Security Practice, is currently featured on SecurityWeek. Automation and orchestration are top of mind for much of the security industry these days, and the past few years have seen great advances in how they can be applied to the rapid analy...

D3 at Infosecurity Europe 2018

Compliance ,
Data Breach
Incident Response
SOAR

by Alex MacLachlan - May 31, 2018

The D3 team is getting ready to fly to the UK for Infosecurity Europe 2018, taking place June 5-7 in London. It’s the largest information security event in Europe, so we’re excited to show off our latest innovations, connect with security professionals from around the world, and learn about how info...

Why Companies Need to Centralize Security Operations: Part 2

Compliance ,
Data Breach
Forensics
Incident Response
Industry
SOAR

by Walker Banerd - May 10, 2018

In Part 1, we looked at the status quo of security systems as they are used in organizations, the reality that automation should be a baseline rather than a novelty in today’s security landscape, and we explored why centralization is essential. In Part 2 below, let’s look at how and why organization...

Why Companies Need to Centralize Security Operations: Part 1

Compliance ,
Data Breach
Incident Response
Industry
SOAR

by Walker Banerd - May 2, 2018

Enterprises need a centralized security solution: a system that connects the infrastructure to allow seamless bidirectional data flow between each system and the enterprise security control center. Despite digital applications permeating nearly every aspect of our lives, many enterprises’ daily proc...

RSA 2018 Recap: Show Me the Orchestration (and the Metrics)

Events ,
Incident Response
SOAR

by Stan Engelbrecht - April 24, 2018

In the cybersecurity world, it’s hard to think of an event more important than each year’s RSA conference. No other event gives us the chance to engage with customers, prospects, partners and industry analysts, the way RSA does. From our perspective as a vendor, it seems that each year has a bit of ...

Where the World Talks Security – RSA 2018

Compliance ,
Events
News
SOAR

by Alex MacLachlan - April 16, 2018

It’s that time of year again! Our team is on its way to San Francisco to take part in the world’s leading cybersecurity event, the 2018 RSA Conference. D3 Security will be joining the ranks of those standing against cyber threats and we are eager to connect with like-minded industry professionals to...

Winning Best Security Automation Platform Was Just the Beginning

Incident Response ,
Industry
SOAR

by Alex MacLachlan - March 8, 2018

While it might not be as glamorous as the Oscars, the cybersecurity industry has its own awards season, culminating in the red-carpet SC Awards during the RSA conference in April. So far in 2018, D3 Security has had a remarkable awards season, with our Incident Response Automation Platform earning t...

D3 Cyber Incident Response Product Guide

Incident Response ,
SOAR

by Walker Banerd - March 5, 2018

D3 has a truly unique cyber incident response offering, which makes it hard to classify—let alone do justice with a quick explanation. This is why we’ve written a comprehensive guide that takes you through the entire product journey. D3’s full-lifecycle capabilities are what sets it apart, so the pr...

Incident Response: What to Automate (and Why)

Incident Response ,
SOAR

by Walker Banerd - January 11, 2018

Let’s get one thing straight: Security automation and orchestration are at the heart of D3’s Incident Management Platform. Our platform’s security automation features streamline the investigation and context-gathering aspects of response, and also provide automated actions, such as blocking IPs and ...

Key Findings from Five Major Cybersecurity Reports

Compliance ,
Data Breach
Incident Response
Industry
SOAR

by Walker Banerd - November 29, 2017

At D3, we are always evolving our products to meet the needs of our customers and stay on the forefront of cyber incident response technology. This requires us to always be informed on the latest industry research, in order to understand the present and future of incident response, and where our sol...

D3 Incident Response Platform Integrations: VirusTotal and DomainTools

SOAR

by Walker Banerd - November 23, 2017

Knowledge is power. The phrase is especially true in the context of an enterprise SOC, where limited information can lead to hours wasted investigating a meaningless alert, or worse, allowing a dangerous incident to slip by undetected. In the fast-paced world of cybersecurity incident response, how ...

See Your Response Plan in Action with D3’s Visual Playbook Editor

Incident Response ,
SOAR

by Walker Banerd - October 23, 2017

There are immediate benefits to simply having visual representations of your response plans. Incident response is complex. It often requires involvement from several internal groups, and by its nature, tends to be needed most during crises or other chaotic situations. Having visual playbooks helps y...

Next-Generation Threat Management: White Paper and Webinar

Incident Response ,
SOAR

by Walker Banerd - October 16, 2017

We recently produced two significant pieces of thought leadership in collaboration with the Chertoff Group, which are both now available. The pieces—a white paper and a webinar—focus on the future of the incident response industry, looking at how vendors can evolve their solutions to support the cha...

New Report Details the Fight Against Ransomware

Incident Response ,
Industry
SOAR

by Walker Banerd - October 5, 2017

The 2017 Ransomware Report, a comprehensive study produced in partnership with D3 Security, was published on September 26. The report compiles survey answers collected by Crowd Research Partners from over 500 cybersecurity professionals to create a complete picture of ransomware in 2017, including h...

Why D3 is the “Perfect” Incident Response Platform for Splunk Users

Incident Response ,
SOAR

by Stan Engelbrecht - September 25, 2017

D3 is excited to support our partner Splunk as a Mega-level sponsor of .conf2017: The 8th Annual Splunk Conference. The conference—running from September 25-28 in Washington, DC—consistently draws some of the most innovative folks in the security business, and it’s one of our favorite places to con...

Avoiding Rigidity in Incident Response Automation

Incident Response ,
SOAR

by Walker Banerd - September 20, 2017

The idea that many analysts and CISOs are concerned about automating and orchestrating security actions should come as no surprise. After all, human decision-making leverages years of relevant experience and training, plus it can pivot on a dime, bringing valuable agility to the SOC. But the fact is...

How to Get More Value from Your Junior Security Analysts

Incident Response ,
SOAR

by Walker Banerd - September 14, 2017

There’s nothing better for your incident response program than an experienced security analyst. But these days, you’re lucky if you have more than one or two on your team, and with such high demand for their skills, it might not be feasible budget-wise to hire as many as you’d like. So if an all-sta...

Saving Valuable Time with Security Automation

Incident Response ,
SOAR

by Walker Banerd - September 6, 2017

Being chronically understaffed means that SOC and IR teams are hit doubly hard by sudden increases in the volume and sophistication of security alerts. Analysts on these teams must contend with dozens of systems and data sources, and largely manual investigative processes. This forces analysts to s...

The Importance of Full-Lifecycle IR to Support Automation

Incident Response ,
SOAR

by Walker Banerd - August 15, 2017

Automation and orchestration have quickly become an integral part of incident response (IR), and grabbed the industry’s attention in the process. That’s because SOC and IR teams have long needed a way to keep up with daily barrages of advanced threats and alerts. But the shine of the spotlight has a...

5 Common Incident Response Problems that SOAR can Help Solve

Incident Response ,
SOAR

by Stan Engelbrecht - July 31, 2017

Most companies that are struggling with their incident response program fall into two categories: They don’t realize what their problems are, because they’ve always done things a certain way They know exactly what their problems are, but don’t have the resources to fix them Whichever category your c...

Cybersecurity Incident Response Buyer’s Guide

Incident Response ,
SOAR

by Walker Banerd - July 20, 2017

Sometimes it seems like you need to be a CISSP just to understand the variety of incident response platforms (IRPs) on the market. Cybersecurity incident response is still a relatively young industry, and the solutions on offer comprise a wide range of different functionality and technology. Compoun...

Understanding Automated Incident Response

Incident Response ,
SOAR

by Walker Banerd - July 7, 2017

If you’ve spent time evaluating cyber incident response platforms (IRPs), you’ve undoubtedly felt the hype surrounding automation and orchestration. And rightfully so. When applied correctly, automation and orchestration can drastically reduce incident response times and eliminate manual tasks—big p...

4 Ways Your IRP Can Help Reduce False Positives

Incident Response ,
SOAR

by Walker Banerd - June 30, 2017

False positives are to the security analyst what cats in trees are to the fire brigade: wasted time and a distraction from the real emergencies. So imagine if a firefighter had to deal with tens of thousands of cats in trees, the way an analyst does with false positives! There would be a lot of [&he...

Why Are Ransomware Attacks So Successful?

Incident Response ,
SOAR

by Alex MacLachlan - June 21, 2017

Ransomware helped cyber criminals pad their Bitcoin wallets with $1B in 2016, according to the FBI. The threat has continued unabated in 2017, with major attacks dominating the headlines and driving profits in excess of $5B. Compared to 2015 when “only” $325M was generated, ransomware has quickly m...

Delivering (and Measuring) Incident Response ROI

Incident Response ,
SOAR

by Walker Banerd - June 20, 2017

Let’s be honest: every vendor talks about how their incident response platform (IRP) can save you time, lower your costs, and reduce security risks. And they’re probably right; IRPs are valuable tools for almost any organization. However, there are several distinct approaches to designing an IRP, wh...

Work Smarter, Not Harder: 5 Steps to Streamlined Incident Response

Incident Response ,
SOAR

by Walker Banerd - June 2, 2017

It’s a common problem in any workplace: you get so caught up dealing with a constant stream of tasks that you never have the chance to evaluate how you’re going about them. This can go on for months or even years before someone takes a step back and realizes that implementing selected process improv...

Incident Response Platforms: 10 Features to Look For

Incident Response ,
SOAR

by Walker Banerd - May 8, 2017

Incident response platforms (IRPs) are powerful software solutions with wide-ranging feature sets. Many features are common across platforms, but each vendor has a unique approach to incident response, and the features they include or omit from their solution will reflect that perspective. At D3, we...

Incident Response Trends in 2017

Incident Response ,
Industry
SOAR

by Walker Banerd - March 20, 2017

Analysts and security professionals agree that 2016 brought cyber security unprecedented levels of attention, with vivid examples of cyber attacks in the news, and a seemingly constant string of hacks, ransomware, and other malicious incidents. The ubiquity of cyber incidents has led to a major shif...

Using IR Automation to Overcome the IT Skills Gap

Incident Response ,
SOAR

by Alex MacLachlan - October 27, 2016

“Cyber threats have evolved from targeting and harming computers, networks, and smartphones — to people, cars, railways, planes, power grids and anything with a heartbeat or an electronic pulse.” Steve Morgan, Hackerpocalypse: A Cybercrime Revelation Nearly half of all cyberattacks strike small and ...

The Value of Unifying SIEM Data with your Incident Response Platform

Incident Response ,
SOAR

by Alex MacLachlan - October 18, 2016

Today’s security information and event management systems (SIEM) operate with a more extensive knowledge base than their predecessors, and they are more useful in detecting and logging data than ever before—but they are never more powerful than when they are paired with a unified incident response (...

Improve your Incident Response Plan Through Automation

Incident Response ,
SOAR

by Alex MacLachlan - October 14, 2016

Cybersecurity is a tough, dynamic line of work. On any given day, you could be dealing with a phishing attack, insider breach, and previously unseen technology being used to launch an attack against your company. As cyberattacks become increasingly sophisticated, you must be prepared to invest time ...

Standardizing Your Incident Response

Incident Response ,
SOAR

by Alex MacLachlan - October 11, 2016

A cyber threat infiltrates your organization and a breach occurs. You and your team go into reactive fire-fighting mode. You isolate the threat and put it down. Crisis averted right? Well what if the attack was an APT (Advanced Persistent Threat)? Just because you pulled the thread and took care of ...

One platform to stop alert overwhelm. Transform how your security team works, by focusing its resources on real threats.

Get Started

Platform

Get started with D3 Security

Want to see us in action? You can get started with SOAR today.

Why Smart SOAR?

Get started with D3 Security

Want to see us in action? You can get started with SOAR today.

Solutions

Get started with D3 Security

Want to see us in action? You can get started with SOAR today.

Partners

Get started with D3 Security

Want to see us in action? You can get started with SOAR today.

Resources

Gartner SOAR Market Guide

Learn what Gartner says about SOAR strategies and vendors.

Company

Get started with D3 Security

Want to see us in action? You can get started with SOAR today.

Why Smart SOAR is the Best SOAR for Trend Vision One

Alert Normalization the Smart Way

Sick and Tired of “Dumb SOAR”? Smart SOAR Is the Answer

Why D3 Smart SOAR is the Best SOAR for Zscaler

How MSSPs Can Save Thousands of Hours in Their SOAR Implementation with Automated Client Onboarding

Defending Against Valid Account Threats: A Holistic Workflow with CrowdStrike, Okta, Elastic, and Recorded Future

Automate Network Security with the Best Independent SOAR for Palo Alto NGFW

How Smart SOAR Automates Threat Hunting

Why Smart SOAR is the Best SOAR for Okta

Why Smart SOAR is the Best SOAR for Active Directory

Why D3 Smart SOAR is the Best SOAR for Carbon Black

How to Reduce the Financial Impact of Security Incidents by 90% or More with Smart SOAR

I’m the CRO at a Master MSSP. Here’s How We Drive Revenue with SOAR

D3 Security Launches MSSP Client Management Portal for Smart SOAR™ Platform

Automatically Triage and Respond to Mimikatz Alerts with CrowdStrike, Okta, and Smart SOAR

D3 Security Launches Smart SOAR™, Delivering Higher ROI, Faster Response & More Confidence

Why Smart SOAR is the Best SOAR for SentinelOne

Experience the Future of SecOps with D3’s Smart SOAR at RSAC 2023

We Implemented Smart SOAR at a Giant MDR Provider. Here’s What We Learned

Why Smart SOAR is the Best SOAR for Microsoft Defender for Endpoint

Leverage Your Microsoft Stack to Shut Down Phishing Campaigns in Seconds

How MSSPs can Serve their First 50 Clients with One SOAR Playbook

Respond to Trojan Alerts in Seconds with SentinelOne, VirusTotal, and Azure Active Directory

Why D3 Smart SOAR is a Security Trailblazer

D3’s Smart SOAR is the Best SOAR for CrowdStrike. Here’s Why

Playbook Breakdown: Cross-Stack Analysis with CrowdStrike, Zscaler, and Active Directory

D3 Security Recognized as a Microsoft Security Excellence Awards Finalist for Security Trailblazer

Attract and Retain Customers with the Ultimate MSSP Client Portal

AI-Assisted Kill Chain Investigation with ChatGPT and Smart SOAR

“Dumb SOAR” Is Failing Its Customers. Are You One of Them?

Transform Incident Response with Smart SOAR and Microsoft Sentinel

Security Automation Explained: A Guide for Beginners

[Video] Trifork Security on How Smart SOAR Helps Streamline Operations

SOAR Use Case: Identity Management

D3’s Roadmap Highlights for 2023: Machine Learning and More

Video: VerSprite on the Importance of Vendor-Agnostic SOAR

How To Detect and Mitigate Malicious Insider Threats With Smart SOAR

Buy Smart SOAR Through Microsoft Azure Consumption Commitment (MACC)

Looking for the SOAR Magic Quadrant? Start Here

Meet D3 Security at the Cyber Security & Cloud Expo Global 2022

Find Threats Faster Together with Elastic & D3 Smart SOAR

Why Independent SOAR Beats SIEM With Integrated SOAR

5 Key Benefits of SOAR (Security Orchestration Automation and Response)

Join D3’s Keynote Session at the KuppingerCole CSLS 2022

Why Smart SOAR Is the World’s Leading Independent SOAR Platform

SOAR Rated “High Benefit” in Gartner® Hype Cycle for SecOps 2022

Why Smart SOAR Is the Best Automation Solution for MSSPs

D3 Security & Zscaler Present: Reduce Cyber Risk with SASE & SOAR

See Smart SOAR in Action at Black Hat 2022

How Does SOAR Fit in an EDR-centric SOC?

How SOAR Automation Can Mitigate the Cybersecurity Talent Crunch

What is a SOAR Playbook?

RSA 2022 Recap: Key Trends and Frequently Asked Questions

Level up your SecOps with Smart SOAR at Splunk .conf22

Why MITRE Calls SOAR “Indispensable” in its Latest Book

How SOAR Can Help You Attract and Retain Cybersecurity Talent

What’s the Difference Between SOAR and SAO?

D3 Security Gives MSPs the Superpower to Become MSSPs

Automate Vulnerability and Threat Management with D3 & ThreatWorx

How D3 Can Help Security Leaders Converge Cyber and Physical Security Operations

D3’s Event Pipeline is the Perfect Example of Gartner’s ‘Hyperautomation in Security’

The Time for SOAR is Now