-
How Smart SOAR Integrations are Built
One of the most common reasons that SOAR users leave their existing solution and work with D3 is because of integration maintenance. In other SOAR…
-
What Enterprise Security Teams Expect from Case Management Solutions
A less-talked about challenge in cybersecurity is managing multiple alert queues. While the volume of alerts is acknowledged as an issue, an important step toward…
-
Cisco’s Acquisition of Splunk: What Does It Mean for Splunk SOAR Users?
In a headline-grabbing announcement that’s got the cybersecurity industry talking, Cisco has revealed its intention to acquire Splunk for an astonishing $28 billion. That’s right,…
-
XDR vs. SIEM vs. SOAR: A Vendor-Agnostic Perspective
For modern SOC teams, detection and response is a big data problem. Effective cyber defense hinges on collecting, analyzing, and acting on massive troves of…
-
Implementing MITRE D3FEND for ATT&CK Technique T1110: Brute Force
When account credentials are unknown, attackers may use a brute force attack in order to gain access. This can occur as an early stage of…
-
Implementing MITRE D3FEND for ATT&CK Technique T1059: Command and Scripting Interpreter
Command and Scripting Interpreter attacks were the second most common technique seen in MITRE’s Engenuity’s Sightings Ecosystem report, representing 15.77% of 1.1 million sightings. MITRE’s…
-
Implementing MITRE D3FEND for ATT&CK Technique T1053: Scheduled Task/Job
Scheduled task/job threats, which make up MITRE ATT&CK Technique T1053, can have severe implications for an organization’s security. MITRE also outlines how to address this…
-
How SOAR and OSINT Work Together
The collection and analysis of open-source threat intelligence (OSINT) are valuable stages in incident response. However, with large datasets and alert volumes, this process becomes…
-
Identity-Driven Security Operations with Smart SOAR
Security Operations Center (SOC) teams are increasingly adopting Security Orchestration, Automation, and Response (SOAR) to keep pace with the growing volume and sophistication of threats…
SOAR
Select a term…