SOT

SOT

SOAR
Security Orchestration, Automation and Response

Automation of response to information security incidents using dynamic playbooks and information security tools, building an attack chain and with an object-oriented approach

NG SOAR
Next Generation SOAR

Automation of response to information security incidents with built-in basic correlation (SIEM), vulnerability Scanner (VS), collection of raw events directly from information security tools, dynamic playbooks, building an attack chain and an object-oriented approach. AM and VM are included

AM
Asset Management

Description of the IT landscape, detection of new objects on the network, categorization of assets, inventory, life cycle management of equipment and software on automated workstations and servers of organizations

VS
Vulnerability Scanner

Scanning information assets with enrichment from any external services (additional scanners, The Data Security Threats Database and other analytical databases) to analyze the security of the infrastructure.

VM
Vulnerability Management

Building a process for detecting and eliminating technical vulnerabilities, collecting information from existing security scanners, update management platforms, expert external services and other solutions

FinCERT
Financial Computer Emergency Response Team

Bilateral interaction with the Central Bank, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

GovCERT
Government Computer Emergency Response Team

Bilateral interaction with the state coordination center for computer incidents, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

Mail us to sales@securityvision.ru or get demo presentation

Security Vision's ‘tricks’: objects and processes

Security Vision's ‘tricks’: objects and processes
27.02.2023


  |  Listen on Google Podcasts  |   Listen on Mave  |   Listen on Yandex Music  |  


Roman Dushkov, Security Vision


We continue publishing the series ‘Security Vision's Features’, which is aimed at introducing you to interesting and useful solutions in our products. This material is dedicated to the peculiarities of working with objects and processes.


Flexible setting of colour indication for text in the interface



To emphasise security threats and deadlines, Security Vision uses the possibility of detailed property customisation. For example, text indicating a high threat level or requests approaching a deadline can be highlighted in red (or any other colour).


Commercial and in-house SOCs can use these features not only to set accents and improve the quality of work, but also to customise the appearance of interfaces to match the corporate style.


Any transactions in workflows



Sometimes a workflow needs to be built in a complex way: branching, with cycles, with returns to previous statuses. For this purpose, the mechanism of process creation in Security Vision does not limit transitions between states and allows you to organise any transition ‘in one button’.


Linking any number of processes to each object



One object in a company can be simultaneously involved in different business processes and be at different stages in each process. Thanks to an inherently unified database, the Security Vision platform provides interconnections natively, without the need for additional integrations or navigating through interface elements.


For example, with one click from the card of any object, you can go to the list of all related workflows or other objects with their own output forms.

Recommended

MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #9 ‘Communicate, Interact, Share Information’
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #9 ‘Communicate, Interact, Share Information’
Review of NIST SP 800-150 "Guide to Cyber Threat Information Sharing"
Review of NIST SP 800-150 "Guide to Cyber Threat Information Sharing"
Why and how to build data networks
Why and how to build data networks
Dynamic source code analysis
Dynamic source code analysis
Fantastic TI and Where He Dwells
Fantastic TI and Where He Dwells
IRP/SOAR by law. GIS, PDN, GOST project
IRP/SOAR by law. GIS, PDN, GOST project
Features of the new version of the Security Vision UEBA product
Features of the new version of the Security Vision UEBA product
Don't trust and check seven times: how Zero Trust works
Don't trust and check seven times: how Zero Trust works
Keylogger for cybersecurity and optimisation
Keylogger for cybersecurity and optimisation
What Kerberos authentication is, what NTLM is and how they work
What Kerberos authentication is, what NTLM is and how they work
Overview of information security tools: users and data
Overview of information security tools: users and data
What is an authentication factor, why do you need a second one and how many are there in total
What is an authentication factor, why do you need a second one and how many are there in total

Recommended

MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #9 ‘Communicate, Interact, Share Information’
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #9 ‘Communicate, Interact, Share Information’
Review of NIST SP 800-150 "Guide to Cyber Threat Information Sharing"
Review of NIST SP 800-150 "Guide to Cyber Threat Information Sharing"
Why and how to build data networks
Why and how to build data networks
Dynamic source code analysis
Dynamic source code analysis
Fantastic TI and Where He Dwells
Fantastic TI and Where He Dwells
IRP/SOAR by law. GIS, PDN, GOST project
IRP/SOAR by law. GIS, PDN, GOST project
Features of the new version of the Security Vision UEBA product
Features of the new version of the Security Vision UEBA product
Don't trust and check seven times: how Zero Trust works
Don't trust and check seven times: how Zero Trust works
Keylogger for cybersecurity and optimisation
Keylogger for cybersecurity and optimisation
What Kerberos authentication is, what NTLM is and how they work
What Kerberos authentication is, what NTLM is and how they work
Overview of information security tools: users and data
Overview of information security tools: users and data
What is an authentication factor, why do you need a second one and how many are there in total
What is an authentication factor, why do you need a second one and how many are there in total

Other articles

What the hell is Security Champion?
What the hell is Security Champion?
Review of the publication NIST SP 1800-22 (Draft) "Mobile Device Security: Bring Your Own Device (BYOD)"
Review of the publication NIST SP 1800-22 (Draft) "Mobile Device Security: Bring Your Own Device (BYOD)"
OWASP Top 10 methodology attacks on web-based systems
OWASP Top 10 methodology attacks on web-based systems
Response scenarios, or how IS/IT processes are like theatre
Response scenarios, or how IS/IT processes are like theatre
What Security Gateways are and what functions they perform
What Security Gateways are and what functions they perform
Using MITRE ATT&CK in the Threat Intelligence Platform
Using MITRE ATT&CK in the Threat Intelligence Platform
Review of the publication NIST SP 800-40 "Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology"
Review of the publication NIST SP 800-40 "Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology"
IRP/SOAR by law. Finance
IRP/SOAR by law. Finance
Security Vision's ‘Chips’: working together
Security Vision's ‘Chips’: working together

Other articles

What the hell is Security Champion?
What the hell is Security Champion?
Review of the publication NIST SP 1800-22 (Draft) "Mobile Device Security: Bring Your Own Device (BYOD)"
Review of the publication NIST SP 1800-22 (Draft) "Mobile Device Security: Bring Your Own Device (BYOD)"
OWASP Top 10 methodology attacks on web-based systems
OWASP Top 10 methodology attacks on web-based systems
Response scenarios, or how IS/IT processes are like theatre
Response scenarios, or how IS/IT processes are like theatre
What Security Gateways are and what functions they perform
What Security Gateways are and what functions they perform
Using MITRE ATT&CK in the Threat Intelligence Platform
Using MITRE ATT&CK in the Threat Intelligence Platform
Review of the publication NIST SP 800-40 "Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology"
Review of the publication NIST SP 800-40 "Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology"
IRP/SOAR by law. Finance
IRP/SOAR by law. Finance
Security Vision's ‘Chips’: working together
Security Vision's ‘Chips’: working together