Automating Incident Response with Microsoft Defender and Intezer

Описание к видео Automating Incident Response with Microsoft Defender and Intezer

Join us for this webinar where Intezer experts will share how your SOC team can use even more automation for triage, incident response, and hunting.

We'll also discuss how to:
1. Automatically triage, confirm, classify, and cluster threats from all your alerts
2. Extract and analyze all the files, URLs, and artifacts from your endpoint alerts to get fast answers and clear recommendations
3. Get additional context on artifacts including attribution, malware families, indicators of compromise (IOCs), and TTPs mapped to MITRE ATT&CK
Do more proactive threat hunting and generate advanced queries

Комментарии

Информация по комментариям в разработке