#2:
Automated Network Traffic Investigation
Analyzing network traffic requires analysts to investigate several information sources, including dense log and event data. Stitching this information together to form timelines and investigative insights is difficult and highly manual, delaying corrective action and increasing the risk to the organization. To carry out investigations with Fortinet and D3 SOAR, analysts can use pre-built commands in D3 to rapidly gather alarm details, event logs, statuses, and other data from FortiGate and FortiSIEM. Similar commands are available for 500+ other tools, giving investigators a centralized console for complex, end-to-end incident investigations.