LogicHub and Anomali Fortify Security Operations With Automated Threat Detection, Threat Intelligence, and Response
Integration will seamlessly reduce false positives to improve and enhance Security Operations Center team efficiency
MOUNTAIN VIEW, Calif., April 16, 2018 /PRNewswire/ -- Proven intelligent security automation solution LogicHub today announced a joint partnership with Anomali to equip Security Operations Center (SOC) teams with new features for threat detection and response. This partnership combines LogicHub's intelligent security automation for threat hunting, alert triage and incident response with the Anomali platform that provides earlier detection of cyber threats and adversaries.
"This powerful platform integration with Anomali will enable security operations teams to bring in threat intelligence to their automated investigation process," said Monica Jain, Co-founder, LogicHub. "This is crucial for analysts to identify high fidelity alerts that really require their attention vs false positives that waste their resources."
LogicHub, the leading SOAR platform, provides SOC teams with the capability to facilitate powerful automation flows for threat detection and incident response. By leveraging advanced correlation and data analysis to detect unknown threats from billions of events, the platform allows for automatic investigation in the same way an expert analyst would. This results in a solution that accurately identifies critical threats while simultaneously filtering out false positives. The solution also features an ecosystem of multiple integrations with other security solutions to advance the orchestration of remediation and response workflows.
Anomali operationalizes threat intelligence, automating collection and integration to enable security teams to expertly analyze and respond to threats. This approach speeds up the detection of threats and automates tasks typically assigned to security professionals. Due to this powerful platform integration, LogicHub's automated flows can now automatically submit investigation artifacts, such as a URL or IP address, directly to Anomali. Anomali then returns a risk score for that artifact and LogicHub combines that score and correlates it with a range of other factors, like traffic volume baselines, to provide a high quality ranking of scored alerts. This new solution will provide enterprises the ability to further automate and orchestrate response actions to remediate the incidents they confidently identified as true positives.
"At Anomali we believe operationalizing threat intelligences means delivering the right information, with the right context and confidence, to the systems that need it," said Darren Gaeta, vice president of alliances at Anomali. "Our partnership and integration with LogicHub is a perfect example and will help enterprises streamline threat detection and incident response."
To learn more about the joint solution, visit LogicHub at RSA Conference in Booth ESE – 34.
About LogicHub: LogicHub offers the industry's most powerful automation platform for security operations, helping organizations dramatically accelerate every SecOps process from alert triage to incident response to threat hunting. Founded on a singular premise that every threat detection process can be automated, LogicHub empowers security analysts to be an order of magnitude more effective and productive. For more information, visit www.logichub.com and follow us on Twitter: @LogicHubHQ.
SOURCE LogicHub
Share this article