SOT

SOT

SOAR
Security Orchestration, Automation and Response

Automation of response to information security incidents using dynamic playbooks and information security tools, building an attack chain and with an object-oriented approach

NG SOAR
Next Generation SOAR

Automation of response to information security incidents with built-in basic correlation (SIEM), vulnerability Scanner (VS), collection of raw events directly from information security tools, dynamic playbooks, building an attack chain and an object-oriented approach. AM and VM are included

AM
Asset Management

Description of the IT landscape, detection of new objects on the network, categorization of assets, inventory, life cycle management of equipment and software on automated workstations and servers of organizations

VS
Vulnerability Scanner

Scanning information assets with enrichment from any external services (additional scanners, The Data Security Threats Database and other analytical databases) to analyze the security of the infrastructure.

VM
Vulnerability Management

Building a process for detecting and eliminating technical vulnerabilities, collecting information from existing security scanners, update management platforms, expert external services and other solutions

FinCERT
Financial Computer Emergency Response Team

Bilateral interaction with the Central Bank, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

GovCERT
Government Computer Emergency Response Team

Bilateral interaction with the state coordination center for computer incidents, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

Mail us to sales@securityvision.ru or get demo presentation

Security Vision's ‘Chips’: building an ecosystem

Security Vision's ‘Chips’: building an ecosystem
13.03.2023


  |  Слушать на Google Podcasts  |   Слушать на Mave  |   Слушать на Яндекс Музыке  |  


Roman Dushkov, Security Vision


We continue publishing the series ‘Security Vision's “Features”’. This article is dedicated to the platform mechanisms that contribute to the formation of a unified IT ecosystem in the company.


Built-in mechanism for inventory and collection of information on assets



Security Vision's own unique agentless network scanner helps scan the customer's entire network and categorise devices by type (Linux and Windows hosts/servers and other devices). Integration with other inventory tools helps build an overall and more detailed picture of the customer's infrastructure.


Create connectors without having to wait for vendor updates



External systems can come and go, fail, or change their internal algorithms affecting integrations. Therefore, it is important to remain flexible and vendor-independent.


When creating connectors to third-party systems in the Security Vision platform, you don't have to wait for the vendor to release a patch or a new version of the system: a special low-code tool is supported for creating new mechanisms and adapting existing ones. It can be used by employees without knowledge of programming languages.


One Mail connector for two tasks



Mail is the main corporate communication channel, often used for alerts. In the Security Vision platform, the Mail Connector can be used for alerts and for ‘reading’ incoming messages. It allows to automatically process requests and start processes after receiving an email from any employee of the company, not only to notify IS/IT administrators about events.

Recommended

What Security Gateways are and what functions they perform
What Security Gateways are and what functions they perform
Security Vision's ‘Chips’: building an ecosystem
Security Vision's ‘Chips’: building an ecosystem
SSDL: Know your opensource vendor by sight and more
SSDL: Know your opensource vendor by sight and more
Review of the publication NIST SP 800-161 Rev. 1 (Draft) "Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations"
Review of the publication NIST SP 800-161 Rev. 1 (Draft) "Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations"
Cyberattacks. Part 1: Technical Tools and Implementation Techniques
Cyberattacks. Part 1: Technical Tools and Implementation Techniques
The IT/IS interface: defence tools
The IT/IS interface: defence tools
SIEM - Security Information and Event Management
SIEM - Security Information and Event Management
What Kerberos authentication is, what NTLM is and how they work
What Kerberos authentication is, what NTLM is and how they work
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #2 ‘Ensure the SOC has the authority it needs to fulfil its mission’
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #2 ‘Ensure the SOC has the authority it needs to fulfil its mission’
Review of NIST Publication SP 800-125 "Guide to Security for Full Virtualization Technologies"
Review of NIST Publication SP 800-125 "Guide to Security for Full Virtualization Technologies"
The information security threat landscape of recent years. Part 1
The information security threat landscape of recent years. Part 1
The ethical hacker and his role in security
The ethical hacker and his role in security

Recommended

What Security Gateways are and what functions they perform
What Security Gateways are and what functions they perform
Security Vision's ‘Chips’: building an ecosystem
Security Vision's ‘Chips’: building an ecosystem
SSDL: Know your opensource vendor by sight and more
SSDL: Know your opensource vendor by sight and more
Review of the publication NIST SP 800-161 Rev. 1 (Draft) "Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations"
Review of the publication NIST SP 800-161 Rev. 1 (Draft) "Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations"
Cyberattacks. Part 1: Technical Tools and Implementation Techniques
Cyberattacks. Part 1: Technical Tools and Implementation Techniques
The IT/IS interface: defence tools
The IT/IS interface: defence tools
SIEM - Security Information and Event Management
SIEM - Security Information and Event Management
What Kerberos authentication is, what NTLM is and how they work
What Kerberos authentication is, what NTLM is and how they work
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #2 ‘Ensure the SOC has the authority it needs to fulfil its mission’
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #2 ‘Ensure the SOC has the authority it needs to fulfil its mission’
Review of NIST Publication SP 800-125 "Guide to Security for Full Virtualization Technologies"
Review of NIST Publication SP 800-125 "Guide to Security for Full Virtualization Technologies"
The information security threat landscape of recent years. Part 1
The information security threat landscape of recent years. Part 1
The ethical hacker and his role in security
The ethical hacker and his role in security

Other articles

Review of NIST SP 800-150 "Guide to Cyber Threat Information Sharing"
Review of NIST SP 800-150 "Guide to Cyber Threat Information Sharing"
Webinars on object, menu and role builders on the Security Vision platform
Webinars on object, menu and role builders on the Security Vision platform
Security Vision announces the release of a new version of the Security Vision UEBA product
Security Vision announces the release of a new version of the Security Vision UEBA product
SOAR maturity model
SOAR maturity model
MITRE's publication ‘11 World-Class SOC Strategies. Strategy #6 ‘Use Cyber Intelligence to Combat Attackers’
MITRE's publication ‘11 World-Class SOC Strategies. Strategy #6 ‘Use Cyber Intelligence to Combat Attackers’
New generation of reports
New generation of reports
The information security threat landscape of recent years. Part 2
The information security threat landscape of recent years. Part 2
Penetration testing
Penetration testing
Why and how to display information: object constructor
Why and how to display information: object constructor

Other articles

Review of NIST SP 800-150 "Guide to Cyber Threat Information Sharing"
Review of NIST SP 800-150 "Guide to Cyber Threat Information Sharing"
Webinars on object, menu and role builders on the Security Vision platform
Webinars on object, menu and role builders on the Security Vision platform
Security Vision announces the release of a new version of the Security Vision UEBA product
Security Vision announces the release of a new version of the Security Vision UEBA product
SOAR maturity model
SOAR maturity model
MITRE's publication ‘11 World-Class SOC Strategies. Strategy #6 ‘Use Cyber Intelligence to Combat Attackers’
MITRE's publication ‘11 World-Class SOC Strategies. Strategy #6 ‘Use Cyber Intelligence to Combat Attackers’
New generation of reports
New generation of reports
The information security threat landscape of recent years. Part 2
The information security threat landscape of recent years. Part 2
Penetration testing
Penetration testing
Why and how to display information: object constructor
Why and how to display information: object constructor