See Clearly and Respond Quickly from the Network to the Endpoint
•
0 likes•126 views
This document discusses the challenges of network security and how a joint solution from ProtectWise and Demisto can help address them. It outlines the benefits of collecting and storing network data in the cloud to enable advanced analytics, detections, and insights. This solution allows for retrospective threat detection and predictive event remediation through automation and orchestration. A demo is then provided of how the joint solution works to automatically detect and respond to security incidents across the network and endpoints.
Recommended
Recommended
More Related Content
What's hot
What's hot (19)
Similar to See Clearly and Respond Quickly from the Network to the Endpoint
Similar to See Clearly and Respond Quickly from the Network to the Endpoint (20)
Recently uploaded
Recently uploaded (20)
See Clearly and Respond Quickly from the Network to the Endpoint
- 1. SEE CLEARLY AND RESPOND QUICKLY FROM THE NETWORK TO THE ENDPOINT May 10, 2017
- 2. 2 David Gold VP, Product Management ProtectWise Rishi Bhargava Co-founder Demisto TODAY’S SPEAKERS
- 3. 3 • Detect, Triage, Remediate: Why Moving Quickly Matters • Retrospective Threat Detection & Predictive Event Remediation • Automation & Orchestration • Hunt More, Respond Less • Demo TODAY’S AGENDA
- 4. 4 WHY HAS NETWORK SECURITY BEEN SO HARD? Multiple, Discrete Point Products in Your Security Environment Frequent Changes to Network Technology Different Interfaces and Skillset Requirements Poor Sharing Capabilities Between Point Products
- 5. WHAT KEEPS YOU FROM MOVING QUICKLY? 5 Complex Web of Security Controls Difficulty Finding Skilled Professionals Managing Varied Levels of Experience Products Not Working Together
- 6. 6 WHERE DO YOU BEGIN? SearchIndexExtractStoreCapture Collect the Right Data Understand the Landscape
- 7. WHAT CAN THE CLOUD DO FOR YOU? 7 ● Long-term retention ● Advanced analytics and detections ● Unified haystack Provides Scale & Power ● Comprehensive, correlated context ● Continuous analysis ● Pervasive visibility Enables Insight & Intelligence
- 8. WHAT CAN YOU DO AS A RESULT? 8 Conduct Deeper Forensic Analysis Improve Incident Response Processes Perform Advanced Threat Hunting View the Complete Attack Kill Chain Have Better Network Visibility
- 9. PROTECTWISE EGRESS INGEST VISUALIZER CORE CLOUD REMOTE INDUSTRIAL NETWORK SENSORS Flexible deployment OPTIMIZED NETWORK REPLAY Compression & Optimization up to 80% ENTERPRISE SECURITY PLATFORM Secure, long-term full packet retention (months or years) TIME MACHINE SECURE VAULT 9
- 10. Network Traffic Behavioral Analysis Machine Learning Heuristics Signatures 24 hours 1 month 6 month 1 year RETROSPECTIVE ANALYTICS +6 months +1 month +24 hours PREDICTIVE ANALYSIS REAL TIME ANALYTICS C1 C2 C3 COLLECTIVE CORRELATION A TIME MACHINE FOR THREAT DETECTION 10
- 12. HOW OUR JOINT SOLUTION WORKS 12 AUTOMATIC DETECTION Reconnaissance Delivery Exploit Beaconing Command & Control Fortification Actions on Objectives UNLIMITED FORENSICS ACTIONS Quarantine Hunt File Geolocate IP Detonate File … etc. ... PLAYBOOKS APPS
- 13. 13 SEE CLEARLY AND RESPOND QUICKLY FROM THE NETWORK TO THE ENDPOINT Speed helps keep your brand and reputation protected. Retrospection keeps your team ahead of sophisticated attacks. Automation and orchestration free up your precious limited resources. Time savings help make your security team more proactive threat hunters.