Intezer์™€ Splunk Soar Integrat

Intezer์™€ Splunk Soar Integrat

์กฐ์ง์€ ์ง€์†์ ์œผ๋กœ ๋ณด์•ˆ ์šด์˜์„ ๊ฐ„์†Œํ™”ํ•˜๊ณ  ์ž๋™ํ™”ํ•˜๊ธฐ ์œ„ํ•ด Intezer์™€ Splunk Soar์˜ ํ†ตํ•ฉ์„ ์‚ฌ์šฉํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ์ด ํ†ตํ•ฉ์€ ๋ณด์•ˆ ์ „๋ฌธ๊ฐ€๊ฐ€ ๊ฒฝ๊ณ  ์‹ฌ์‚ฌ ๋ฐ ์œ„ํ˜‘์˜ ์‘๋‹ต์„ ์ž๋™ํ™”ํ•  ์ˆ˜ ์žˆ๋„๋ก ๊ฐ•๋ ฅํ•œ ์กฐํ•ฉ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. Splunk Soar ์‚ฌ์šฉ์ž๋Š” Intezer์— ํŒŒ์ผ, ํŒŒ์ผ ํ•ด์‹œ, URL, ์˜์‹ฌ์Šค๋Ÿฌ์šด ์ด๋ฉ”์ผ, ๋ณด์•ˆ ์•Œ๋ฆผ ๋“ฑ์„ ์ œ์ถœํ•˜์—ฌ ๋ถ„์„ํ•  ์ˆ˜ ์žˆ๊ณ , ๊ฒฝ๋ณด ์กฐ์‚ฌ ๊ฒฐ๊ณผ๋ฅผ ์ž๋™์œผ๋กœ ์ฒ˜๋ฆฌํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

Intezer and Splunk SOAR Integ

The organization uses the integration of Intezer and Splunk Coar to continue to simplify and automate security operations.This integration provides a powerful combination for security experts to automate warning reviews and threats.SPLUNK SOAR users can submit files, file hashes, URLs, suspicious e -mails, and security notifications in Intezer, and can automatically handle alarm results.

https://intezer.com/blog/alert-triage/intezer-and-splunk-soar-integration/