SOT

SOT

SOAR
Security Orchestration, Automation and Response

Automation of response to information security incidents using dynamic playbooks and information security tools, building an attack chain and with an object-oriented approach

NG SOAR
Next Generation SOAR

Automation of response to information security incidents with built-in basic correlation (SIEM), vulnerability Scanner (VS), collection of raw events directly from information security tools, dynamic playbooks, building an attack chain and an object-oriented approach. AM and VM are included

AM
Asset Management

Description of the IT landscape, detection of new objects on the network, categorization of assets, inventory, life cycle management of equipment and software on automated workstations and servers of organizations

VS
Vulnerability Scanner

Scanning information assets with enrichment from any external services (additional scanners, The Data Security Threats Database and other analytical databases) to analyze the security of the infrastructure.

VM
Vulnerability Management

Building a process for detecting and eliminating technical vulnerabilities, collecting information from existing security scanners, update management platforms, expert external services and other solutions

FinCERT
Financial Computer Emergency Response Team

Bilateral interaction with the Central Bank, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

GovCERT
Government Computer Emergency Response Team

Bilateral interaction with the state coordination center for computer incidents, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

Mail us to sales@securityvision.ru or get demo presentation

Security Vision's ‘tricks’: data offloading

Security Vision's ‘tricks’: data offloading
13.02.2023


  |  Слушать на Google Podcasts  |   Слушать на Mave  |   Слушать на Яндекс Музыке  |  


Roman Dushkov, Security Vision


We continue publishing the series ‘Security Vision's Features’, which is aimed at introducing you to interesting solutions in our products. This article is dedicated to the peculiarities of data unloading.


Uploading local reports with images



Images can be contained in any card of an incident, asset, vulnerability, audit procedure, risk assessment, etc. When uploading, the ability to edit and modify images is preserved: zoom, rotate, etc.


Uploading graphs in editable format with a manageable data set



The mechanism of saving source tables for further editing outside the platform is used to upload graph data. This can be useful when processing data in any system, even a text editor. There is no need to rebuild charts separately or use an external BI system.


Offloading objects and entire lists



It is safer to create alienated files with useful information without adding external access to internal systems to store data and work with contractors. Objects with details can be offloaded as separate files or summary tables with fields that duplicate the appearance of card and table views for any objects.


This increases the availability of investigative and analytical material without the risk of users receiving redundant or critical information.

Recommended

Review of NIST Publication SP 800-184, Guide for Cybersecurity Event Recovery
Review of NIST Publication SP 800-184, Guide for Cybersecurity Event Recovery
Internet of Things and security
Internet of Things and security
Access control and user identification. IDM systems
Access control and user identification. IDM systems
What Security Gateways are and what functions they perform
What Security Gateways are and what functions they perform
Measuring the effectiveness of cybersecurity processes. IS metrics. Part 3
Measuring the effectiveness of cybersecurity processes. IS metrics. Part 3
The Internet of Things and its applications
The Internet of Things and its applications
SSDL: ML for code and behaviour testing of opensource solutions
SSDL: ML for code and behaviour testing of opensource solutions
Raising awareness on IS issues
Raising awareness on IS issues
ChatGPT in IS - on the dark side and the light side
ChatGPT in IS - on the dark side and the light side
What trusted boot tools are and what they are used for
What trusted boot tools are and what they are used for
Threat Database Overview
Threat Database Overview
Practical protection of personal data. Evaluate the effectiveness of measures taken to ensure the security of personal data
Practical protection of personal data. Evaluate the effectiveness of measures taken to ensure the security of personal data

Recommended

Review of NIST Publication SP 800-184, Guide for Cybersecurity Event Recovery
Review of NIST Publication SP 800-184, Guide for Cybersecurity Event Recovery
Internet of Things and security
Internet of Things and security
Access control and user identification. IDM systems
Access control and user identification. IDM systems
What Security Gateways are and what functions they perform
What Security Gateways are and what functions they perform
Measuring the effectiveness of cybersecurity processes. IS metrics. Part 3
Measuring the effectiveness of cybersecurity processes. IS metrics. Part 3
The Internet of Things and its applications
The Internet of Things and its applications
SSDL: ML for code and behaviour testing of opensource solutions
SSDL: ML for code and behaviour testing of opensource solutions
Raising awareness on IS issues
Raising awareness on IS issues
ChatGPT in IS - on the dark side and the light side
ChatGPT in IS - on the dark side and the light side
What trusted boot tools are and what they are used for
What trusted boot tools are and what they are used for
Threat Database Overview
Threat Database Overview
Practical protection of personal data. Evaluate the effectiveness of measures taken to ensure the security of personal data
Practical protection of personal data. Evaluate the effectiveness of measures taken to ensure the security of personal data

Other articles

Review of NIST Publication SP 800-215 "Guide to a Secure Enterprise Network Landscape"
Review of NIST Publication SP 800-215 "Guide to a Secure Enterprise Network Landscape"
Benefits of Pentest for the post-incident patient
Benefits of Pentest for the post-incident patient
Information security overview: network defence
Information security overview: network defence
Information security terms and definitions
Information security terms and definitions
MITRE's publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #1 ‘Know what you are protecting and why’
MITRE's publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #1 ‘Know what you are protecting and why’
What Kerberos authentication is, what NTLM is and how they work
What Kerberos authentication is, what NTLM is and how they work
A summary of NIST's special publications on information security. Part 2
A summary of NIST's special publications on information security. Part 2
Security Vision features: reports and analytics
Security Vision features: reports and analytics
Why you need user monitoring and how it works
Why you need user monitoring and how it works

Other articles

Review of NIST Publication SP 800-215 "Guide to a Secure Enterprise Network Landscape"
Review of NIST Publication SP 800-215 "Guide to a Secure Enterprise Network Landscape"
Benefits of Pentest for the post-incident patient
Benefits of Pentest for the post-incident patient
Information security overview: network defence
Information security overview: network defence
Information security terms and definitions
Information security terms and definitions
MITRE's publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #1 ‘Know what you are protecting and why’
MITRE's publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #1 ‘Know what you are protecting and why’
What Kerberos authentication is, what NTLM is and how they work
What Kerberos authentication is, what NTLM is and how they work
A summary of NIST's special publications on information security. Part 2
A summary of NIST's special publications on information security. Part 2
Security Vision features: reports and analytics
Security Vision features: reports and analytics
Why you need user monitoring and how it works
Why you need user monitoring and how it works