11
Wichtige Fakten
- Baselining: Establish a baseline of THOR scan results and focus on what has changed. Filter, visualize and automatically group IOC matches to identify new or relevant findings and turn them into investigation cases.
- Integrated Case Management: Group related security findings into cases and coordinate investigations across analyst teams. Configurable analyst levels, groups and workflows let you adapt the investigation process to your organization and operational needs.
- Reporting & Notifications: Create built-in or custom reports covering IOC matches, case activity and event statistics. Schedule reports, export data for external reporting, and notify teams of relevant case updates or new events through SYSLOG, email and webhooks.
Kategorien
Intrusion Detection / Prevention Penetrationstests Schwachstellen- und Patch-Management Managed Security Services RZ-Sicherheit Compliance/GRC (Produkte und Dienstleistungen) Bedrohungsanalysen Denial-of-Service-Abwehr Beratung IT-Sicherheit Datenschutz / Datensicherheit Sicherheitsmanagement Forensik Risikoanalyse / Risikomanagement SIEM Security Information and Event Management Endgerätesicherheit
Produkt Information
Analysis Cockpit provides centralized analysis of THOR scan results, giving security teams visibility into indicator of compromise (IOC) matches across their environment. Analysts can baseline results, correlate and group related events, and focus investigations on new or changed findings.
Integrated case management enables multiple analysts to collaborate on investigations using configurable analyst levels, groups and workflows. Dashboards, asset overviews and tailored event views help teams organize large volumes of security data and maintain a structured investigation process.
Analysis Cockpit also provides built-in and custom reporting, scheduled reports, notifications via SYSLOG, email and webhooks, and API integrations with case man ...Produktexperte
Download Produkt Information