SOT

SOT

SOAR
Security Orchestration, Automation and Response

Automation of response to information security incidents using dynamic playbooks and information security tools, building an attack chain and with an object-oriented approach

NG SOAR
Next Generation SOAR

Automation of response to information security incidents with built-in basic correlation (SIEM), vulnerability Scanner (VS), collection of raw events directly from information security tools, dynamic playbooks, building an attack chain and an object-oriented approach. AM and VM are included

AM
Asset Management

Description of the IT landscape, detection of new objects on the network, categorization of assets, inventory, life cycle management of equipment and software on automated workstations and servers of organizations

VS
Vulnerability Scanner

Scanning information assets with enrichment from any external services (additional scanners, The Data Security Threats Database and other analytical databases) to analyze the security of the infrastructure.

VM
Vulnerability Management

Building a process for detecting and eliminating technical vulnerabilities, collecting information from existing security scanners, update management platforms, expert external services and other solutions

FinCERT
Financial Computer Emergency Response Team

Bilateral interaction with the Central Bank, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

GovCERT
Government Computer Emergency Response Team

Bilateral interaction with the state coordination center for computer incidents, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

Mail us to sales@securityvision.ru or get demo presentation

Security Vision's ‘Chips’: building an ecosystem

Security Vision's ‘Chips’: building an ecosystem
13.03.2023


  |  Слушать на Google Podcasts  |   Слушать на Mave  |   Слушать на Яндекс Музыке  |  


Roman Dushkov, Security Vision


We continue publishing the series ‘Security Vision's “Features”’. This article is dedicated to the platform mechanisms that contribute to the formation of a unified IT ecosystem in the company.


Built-in mechanism for inventory and collection of information on assets



Security Vision's own unique agentless network scanner helps scan the customer's entire network and categorise devices by type (Linux and Windows hosts/servers and other devices). Integration with other inventory tools helps build an overall and more detailed picture of the customer's infrastructure.


Create connectors without having to wait for vendor updates



External systems can come and go, fail, or change their internal algorithms affecting integrations. Therefore, it is important to remain flexible and vendor-independent.


When creating connectors to third-party systems in the Security Vision platform, you don't have to wait for the vendor to release a patch or a new version of the system: a special low-code tool is supported for creating new mechanisms and adapting existing ones. It can be used by employees without knowledge of programming languages.


One Mail connector for two tasks



Mail is the main corporate communication channel, often used for alerts. In the Security Vision platform, the Mail Connector can be used for alerts and for ‘reading’ incoming messages. It allows to automatically process requests and start processes after receiving an email from any employee of the company, not only to notify IS/IT administrators about events.

Recommended

Security Vision features: reports and analytics
Security Vision features: reports and analytics
OWASP Top 10 methodology attacks on web-based systems
OWASP Top 10 methodology attacks on web-based systems
Threat analysis and cyber intelligence: what problems the updated Security Vision TIP solves
Threat analysis and cyber intelligence: what problems the updated Security Vision TIP solves
Artificial intelligence in information security
Artificial intelligence in information security
Security Vision's ‘features’: general
Security Vision's ‘features’: general
Security Vision announces the release of a new version of the Security Vision UEBA product
Security Vision announces the release of a new version of the Security Vision UEBA product
False or not false?
False or not false?
Security of transfers and payment for goods via SBP. Part 1
Security of transfers and payment for goods via SBP. Part 1
New features of the Security Vision Risk Management (RM) product
New features of the Security Vision Risk Management (RM) product
MITRE's publication ‘11 World-Class SOC Strategies. Strategy #6 ‘Use Cyber Intelligence to Combat Attackers’
MITRE's publication ‘11 World-Class SOC Strategies. Strategy #6 ‘Use Cyber Intelligence to Combat Attackers’
Review of NIST Publication SP 800-215 "Guide to a Secure Enterprise Network Landscape"
Review of NIST Publication SP 800-215 "Guide to a Secure Enterprise Network Landscape"
SGRC by law. GIS, PDN, GOST project
SGRC by law. GIS, PDN, GOST project

Recommended

Security Vision features: reports and analytics
Security Vision features: reports and analytics
OWASP Top 10 methodology attacks on web-based systems
OWASP Top 10 methodology attacks on web-based systems
Threat analysis and cyber intelligence: what problems the updated Security Vision TIP solves
Threat analysis and cyber intelligence: what problems the updated Security Vision TIP solves
Artificial intelligence in information security
Artificial intelligence in information security
Security Vision's ‘features’: general
Security Vision's ‘features’: general
Security Vision announces the release of a new version of the Security Vision UEBA product
Security Vision announces the release of a new version of the Security Vision UEBA product
False or not false?
False or not false?
Security of transfers and payment for goods via SBP. Part 1
Security of transfers and payment for goods via SBP. Part 1
New features of the Security Vision Risk Management (RM) product
New features of the Security Vision Risk Management (RM) product
MITRE's publication ‘11 World-Class SOC Strategies. Strategy #6 ‘Use Cyber Intelligence to Combat Attackers’
MITRE's publication ‘11 World-Class SOC Strategies. Strategy #6 ‘Use Cyber Intelligence to Combat Attackers’
Review of NIST Publication SP 800-215 "Guide to a Secure Enterprise Network Landscape"
Review of NIST Publication SP 800-215 "Guide to a Secure Enterprise Network Landscape"
SGRC by law. GIS, PDN, GOST project
SGRC by law. GIS, PDN, GOST project

Other articles

Internet of Things and security
Internet of Things and security
IT and IS processes
IT and IS processes
Dynamic IRP/SOAR 2.0 playbooks on the Security Vision 5 platform
Dynamic IRP/SOAR 2.0 playbooks on the Security Vision 5 platform
Quality metrics for dynamic playbooks
Quality metrics for dynamic playbooks
SD-WAN - Orchestrator for large scale networks
SD-WAN - Orchestrator for large scale networks
Information security trends. Part 3
Information security trends. Part 3
How to learn how to build a Kilchain
How to learn how to build a Kilchain
Practical protection of personal data. What are the information protection means that have undergone the conformity assessment procedure in accordance with the established procedure
Practical protection of personal data. What are the information protection means that have undergone the conformity assessment procedure in accordance with the established procedure
Webinars on object, menu and role builders on the Security Vision platform
Webinars on object, menu and role builders on the Security Vision platform

Other articles

Internet of Things and security
Internet of Things and security
IT and IS processes
IT and IS processes
Dynamic IRP/SOAR 2.0 playbooks on the Security Vision 5 platform
Dynamic IRP/SOAR 2.0 playbooks on the Security Vision 5 platform
Quality metrics for dynamic playbooks
Quality metrics for dynamic playbooks
SD-WAN - Orchestrator for large scale networks
SD-WAN - Orchestrator for large scale networks
Information security trends. Part 3
Information security trends. Part 3
How to learn how to build a Kilchain
How to learn how to build a Kilchain
Practical protection of personal data. What are the information protection means that have undergone the conformity assessment procedure in accordance with the established procedure
Practical protection of personal data. What are the information protection means that have undergone the conformity assessment procedure in accordance with the established procedure
Webinars on object, menu and role builders on the Security Vision platform
Webinars on object, menu and role builders on the Security Vision platform