SOT

SOT

SOAR
Security Orchestration, Automation and Response

Automation of response to information security incidents using dynamic playbooks and information security tools, building an attack chain and with an object-oriented approach

NG SOAR
Next Generation SOAR

Automation of response to information security incidents with built-in basic correlation (SIEM), vulnerability Scanner (VS), collection of raw events directly from information security tools, dynamic playbooks, building an attack chain and an object-oriented approach. AM and VM are included

AM
Asset Management

Description of the IT landscape, detection of new objects on the network, categorization of assets, inventory, life cycle management of equipment and software on automated workstations and servers of organizations

VS
Vulnerability Scanner

Scanning information assets with enrichment from any external services (additional scanners, The Data Security Threats Database and other analytical databases) to analyze the security of the infrastructure.

VM
Vulnerability Management

Building a process for detecting and eliminating technical vulnerabilities, collecting information from existing security scanners, update management platforms, expert external services and other solutions

FinCERT
Financial Computer Emergency Response Team

Bilateral interaction with the Central Bank, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

GovCERT
Government Computer Emergency Response Team

Bilateral interaction with the state coordination center for computer incidents, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

Mail us to sales@securityvision.ru or get demo presentation

Security Vision features: reports and analytics

Security Vision features: reports and analytics
06.03.2023


  |  Listen on Google Podcasts  |   Listen on Mave  |   Listen on Yandex Music  |  



Roman Dushkov, Security Vision


We continue publishing the series ‘Security Vision's Features’, which is aimed at introducing you to interesting and useful solutions in our products. This material is dedicated to the peculiarities of working with reports and analytical data.


Interactive relationship graph for all modules of the system



Relationship graphs can be used to investigate or establish relationships between users, incidents and assets. The Security Vision engine provides the ability to not only show relationships, but also to conduct operations without having to switch between tabs.


This allows SOC staff to explore the details of individual elements in the same window, as well as respond to incidents and trigger various processes directly from the overall graph view. This approach speeds up the work of IT/IS staff and does not increase the load on the workstation by multiples of the number of open tabs.


Built-in document editor for reporting



Security Vision has a full-fledged engine for creating custom reporting forms with content selection, text formatting and indentation, page layout and orientation. Thus, it is possible to export data immediately in the form required by management or related departments.


Built-in BI engine for visualisation



Security Vision is able to display any data collected in the platform's database in graphs. The engine is the same for both cards and integrative dashboards in the interface and for uploaded reports. This allows you to create a single database of charts and maps to display any data on them, for example, the location of assets on a city or office map, a diagram of incidents with distribution by criticality.


Application of one BI tool in different modules: widgets can be created for several purposes at once



Widgets and graphics can be used in several modules at once: when describing any objects, when generating reports by request/schedule, as well as in analyst's or auditor's dashboards.

Recommended

Cyberattacks. Part 2: Advanced Techniques and Manipulations
Cyberattacks. Part 2: Advanced Techniques and Manipulations
Gamification of the SOC
Gamification of the SOC
Visualisation: best practices
Visualisation: best practices
New approaches and new opportunities for network infrastructure monitoring
New approaches and new opportunities for network infrastructure monitoring
Why you need user monitoring and how it works
Why you need user monitoring and how it works
Review of the publication NIST SP 800-213 "IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements"
Review of the publication NIST SP 800-213 "IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements"
Protecting web applications: anti-DDoS
Protecting web applications: anti-DDoS
Information leakage channels. Part 1
Information leakage channels. Part 1
Security Vision's ‘Chips’: building an ecosystem
Security Vision's ‘Chips’: building an ecosystem
SGRC by law. Finance
SGRC by law. Finance
IT and IS processes
IT and IS processes
A summary of NIST's special publications on information security. Part 1
A summary of NIST's special publications on information security. Part 1

Recommended

Cyberattacks. Part 2: Advanced Techniques and Manipulations
Cyberattacks. Part 2: Advanced Techniques and Manipulations
Gamification of the SOC
Gamification of the SOC
Visualisation: best practices
Visualisation: best practices
New approaches and new opportunities for network infrastructure monitoring
New approaches and new opportunities for network infrastructure monitoring
Why you need user monitoring and how it works
Why you need user monitoring and how it works
Review of the publication NIST SP 800-213 "IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements"
Review of the publication NIST SP 800-213 "IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements"
Protecting web applications: anti-DDoS
Protecting web applications: anti-DDoS
Information leakage channels. Part 1
Information leakage channels. Part 1
Security Vision's ‘Chips’: building an ecosystem
Security Vision's ‘Chips’: building an ecosystem
SGRC by law. Finance
SGRC by law. Finance
IT and IS processes
IT and IS processes
A summary of NIST's special publications on information security. Part 1
A summary of NIST's special publications on information security. Part 1

Other articles

Principles of information security
Principles of information security
Benefits of Pentest for the post-incident patient
Benefits of Pentest for the post-incident patient
Features of the new version of the Security Vision UEBA product
Features of the new version of the Security Vision UEBA product
The art of the trailblazer in corporate infrastructure
The art of the trailblazer in corporate infrastructure
Features of the new version of the Asset and Inventory Management product on the Security Vision 5 platform
Features of the new version of the Asset and Inventory Management product on the Security Vision 5 platform
Security Vision Compliance Management capabilities
Security Vision Compliance Management capabilities
IT and IS processes
IT and IS processes
SGRC by law. Finance
SGRC by law. Finance
Raising awareness on IS issues
Raising awareness on IS issues

Other articles

Principles of information security
Principles of information security
Benefits of Pentest for the post-incident patient
Benefits of Pentest for the post-incident patient
Features of the new version of the Security Vision UEBA product
Features of the new version of the Security Vision UEBA product
The art of the trailblazer in corporate infrastructure
The art of the trailblazer in corporate infrastructure
Features of the new version of the Asset and Inventory Management product on the Security Vision 5 platform
Features of the new version of the Asset and Inventory Management product on the Security Vision 5 platform
Security Vision Compliance Management capabilities
Security Vision Compliance Management capabilities
IT and IS processes
IT and IS processes
SGRC by law. Finance
SGRC by law. Finance
Raising awareness on IS issues
Raising awareness on IS issues