SOT

SOT

SOAR
Security Orchestration, Automation and Response

Automation of response to information security incidents using dynamic playbooks and information security tools, building an attack chain and with an object-oriented approach

NG SOAR
Next Generation SOAR

Automation of response to information security incidents with built-in basic correlation (SIEM), vulnerability Scanner (VS), collection of raw events directly from information security tools, dynamic playbooks, building an attack chain and an object-oriented approach. AM and VM are included

AM
Asset Management

Description of the IT landscape, detection of new objects on the network, categorization of assets, inventory, life cycle management of equipment and software on automated workstations and servers of organizations

VS
Vulnerability Scanner

Scanning information assets with enrichment from any external services (additional scanners, The Data Security Threats Database and other analytical databases) to analyze the security of the infrastructure.

VM
Vulnerability Management

Building a process for detecting and eliminating technical vulnerabilities, collecting information from existing security scanners, update management platforms, expert external services and other solutions

FinCERT
Financial Computer Emergency Response Team

Bilateral interaction with the Central Bank, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

GovCERT
Government Computer Emergency Response Team

Bilateral interaction with the state coordination center for computer incidents, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

Mail us to sales@securityvision.ru or get demo presentation

Features of the new version of the Asset and Inventory Management product on the Security Vision 5 platform

Features of the new version of the Asset and Inventory Management product on the Security Vision 5 platform
13.05.2024

The new version of the product features an improved mechanism for scanning and inventory of assets with automatic creation of links between assets and sub-networks. The product contains full functionality of working in the MSSP-model mode both for independent asset management of several organisations and for the Customer's subsidiaries.


New object types (Databases and Network devices) with deeply developed attribute composition, visualisation and a set of actions for administration and inventory have been added. The cards of IT objects and resource-service model objects have been significantly improved, and the set of actions with assets has been significantly expanded.


The asset lifecycle model has been redesigned and brought in line with the recommendations of the universally recognised ITIL 4 methodology.


The most significant updates are


Scanning, inventory and loading of assets


Asset discovery, identification, inventory and categorisation are performed automatically. Assets can be created manually, using bulk uploads from external files, as well as from external sources using a large set of integrations (Active Directory, Directory Services, CMDB, network scanners, NWI, and others).


The product's flexible settings allow you to perform asset inventory by selected subnets and ranges, as well as by asset groups or a specific asset.


Scanning and inventory can be started manually at any time or a regular schedule can be set up. A wide range of asset actions provides detailed asset information to clarify the current status of a device or change its configuration. Convenient push notifications highlight the success of operations, and if there are errors, you can quickly identify their type. The product also includes built-in alerts on the results of actions and scans via other communication channels: mail, telegram and others, with the possibility of their extension and customisation.


Updated data model and object display


Detailed connections between business objects of the resource-service model (Business Processes, Products, Suppliers, Premises, Equipment) and IT assets have been worked out. For example, it is now possible to create the exact location of an asset in a specific room and display it on the room plan.


Deep decomposition of IT assets allows to realise the required level of infrastructure detail using such objects as Information System or Protection Systems.


Added Database object with the ability to automatically detect and control databases with a mechanism for updating data on database objects and users. All major database vendors are supported (MSSQL, MySQL, PostgreSQL, Oracle and others).


Extended functionality of work with the main network devices (UserGate, Continent NGFW, ViPNet, Cisco ASA, Checkpoint and others): data collection, obtaining configured rules and configuration parameters, building a graph of connections with local network objects, tracking active connections, as well as performing active actions on equipment configuration.


The appearance of object display has been redesigned for more convenient work with assets. In particular, an updated link graph has been added with the functionality of performing actions on assets directly from it, as well as with the drill-down function in each linked object; a timeline reflecting the chronology of the life cycle of the asset and actions on it has been built in.


The attributive content of cards has been expanded both at the level of technical characteristics and business parameters.




Convenient tree view allows you to build a hierarchical view by selected groups of assets, their location or organisational affiliation.



Software Management


The software management and usage control mechanism has been completely updated. Optimised approach to centralised software update and uninstallation on hosts, everything is in a single window and transparent for the user.


Extended the mechanism of labelling and centralised control over the software in use. It is possible to maintain whitelists and blacklists of applications, allowed and banned versions.


Actions with assets


The set of actions on the main types of assets has been significantly expanded for obtaining detailed information, administration, user management and other purposes. Actions are available directly from the asset card as well as from the relationship graph. The link graph allows you to perform actions on any linked object. Convenient grouping of actions allows you to quickly find what you need, and the result is recorded in the timeline, on the card and in a push notification.


Dashboards and report library


A full-fledged network map has been created, allowing you to track the location of assets by subnets and their interconnections.


The report registry has been significantly expanded to include both summary reports with pre-configured scheduled dispatch and small reports on key parameters.


At the same time, the graphical constructors of the Security Vision platforms allow you to adjust and create new reports and dashboards in no-code mode.

Recommended

IT and IS processes
IT and IS processes
Darknet - what it is, how criminals use it, what to watch out for
Darknet - what it is, how criminals use it, what to watch out for
New approaches and new opportunities for network infrastructure monitoring
New approaches and new opportunities for network infrastructure monitoring
Don't trust and check seven times: how Zero Trust works
Don't trust and check seven times: how Zero Trust works
Information security terms and definitions
Information security terms and definitions
Network forensics using ZUI
Network forensics using ZUI
Review of NIST Publication SP 800-215 "Guide to a Secure Enterprise Network Landscape"
Review of NIST Publication SP 800-215 "Guide to a Secure Enterprise Network Landscape"
How to learn how to build a Kilchain
How to learn how to build a Kilchain
Security Vision's ‘Chips’: building an ecosystem
Security Vision's ‘Chips’: building an ecosystem
Review of the publication NIST SP 800-82 Rev. 2 "Guide to Industrial Control Systems (ICS) Security"
Review of the publication NIST SP 800-82 Rev. 2 "Guide to Industrial Control Systems (ICS) Security"
A summary of NIST's special publications on information security. Part 1
A summary of NIST's special publications on information security. Part 1
The usefulness of IT systems in the work of an IS analyst
The usefulness of IT systems in the work of an IS analyst

Recommended

IT and IS processes
IT and IS processes
Darknet - what it is, how criminals use it, what to watch out for
Darknet - what it is, how criminals use it, what to watch out for
New approaches and new opportunities for network infrastructure monitoring
New approaches and new opportunities for network infrastructure monitoring
Don't trust and check seven times: how Zero Trust works
Don't trust and check seven times: how Zero Trust works
Information security terms and definitions
Information security terms and definitions
Network forensics using ZUI
Network forensics using ZUI
Review of NIST Publication SP 800-215 "Guide to a Secure Enterprise Network Landscape"
Review of NIST Publication SP 800-215 "Guide to a Secure Enterprise Network Landscape"
How to learn how to build a Kilchain
How to learn how to build a Kilchain
Security Vision's ‘Chips’: building an ecosystem
Security Vision's ‘Chips’: building an ecosystem
Review of the publication NIST SP 800-82 Rev. 2 "Guide to Industrial Control Systems (ICS) Security"
Review of the publication NIST SP 800-82 Rev. 2 "Guide to Industrial Control Systems (ICS) Security"
A summary of NIST's special publications on information security. Part 1
A summary of NIST's special publications on information security. Part 1
The usefulness of IT systems in the work of an IS analyst
The usefulness of IT systems in the work of an IS analyst

Other articles

The role of the cyber polygon in IS assurance
The role of the cyber polygon in IS assurance
The usefulness of IT systems in the work of an IS analyst
The usefulness of IT systems in the work of an IS analyst
Security Vision's ‘features’: general
Security Vision's ‘features’: general
Security of transfers and payment for goods via SBP. Part 2
Security of transfers and payment for goods via SBP. Part 2
Security Vision Next Generation SOAR: Next Generation Cyber Threat Response Product
Security Vision Next Generation SOAR: Next Generation Cyber Threat Response Product
IRP/SOAR by law. CII
IRP/SOAR by law. CII
Practical protection of personal data. What are the information protection means that have undergone the conformity assessment procedure in accordance with the established procedure
Practical protection of personal data. What are the information protection means that have undergone the conformity assessment procedure in accordance with the established procedure
Network forensics using ZUI
Network forensics using ZUI
Review of NIST Publication SP 800-190, ‘Application Container Security Guide’
Review of NIST Publication SP 800-190, ‘Application Container Security Guide’

Other articles

The role of the cyber polygon in IS assurance
The role of the cyber polygon in IS assurance
The usefulness of IT systems in the work of an IS analyst
The usefulness of IT systems in the work of an IS analyst
Security Vision's ‘features’: general
Security Vision's ‘features’: general
Security of transfers and payment for goods via SBP. Part 2
Security of transfers and payment for goods via SBP. Part 2
Security Vision Next Generation SOAR: Next Generation Cyber Threat Response Product
Security Vision Next Generation SOAR: Next Generation Cyber Threat Response Product
IRP/SOAR by law. CII
IRP/SOAR by law. CII
Practical protection of personal data. What are the information protection means that have undergone the conformity assessment procedure in accordance with the established procedure
Practical protection of personal data. What are the information protection means that have undergone the conformity assessment procedure in accordance with the established procedure
Network forensics using ZUI
Network forensics using ZUI
Review of NIST Publication SP 800-190, ‘Application Container Security Guide’
Review of NIST Publication SP 800-190, ‘Application Container Security Guide’