11
Key Facts
- Baselining: Establish a baseline of THOR scan results and focus on what has changed. Filter, visualize and automatically group IOC matches to identify new or relevant findings and turn them into investigation cases.
- Integrated Case Management: Group related security findings into cases and coordinate investigations across analyst teams. Configurable analyst levels, groups and workflows let you adapt the investigation process to your organization and operational needs.
- Reporting & Notifications: Create built-in or custom reports covering IOC matches, case activity and event statistics. Schedule reports, export data for external reporting, and notify teams of relevant case updates or new events through SYSLOG, email and webhooks.
Categories
Intrusion detection / prevention Penetration tests Vulnerability and patch management Managed security services Data center security Compliance / GRC (products and services) Threat analysis Denial of service protection Consulting IT security Data protection, data security Security management Forensics Risk analysis and management SIEM Security information and event management Endpoint security
Product information
Analysis Cockpit provides centralized analysis of THOR scan results, giving security teams visibility into indicator of compromise (IOC) matches across their environment. Analysts can baseline results, correlate and group related events, and focus investigations on new or changed findings.
Integrated case management enables multiple analysts to collaborate on investigations using configurable analyst levels, groups and workflows. Dashboards, asset overviews and tailored event views help teams organize large volumes of security data and maintain a structured investigation process.
Analysis Cockpit also provides built-in and custom reporting, scheduled reports, notifications via SYSLOG, email and webhooks, and API integrations with case man ...Product Expert
Download product information