Proofpoint Adds Advanced Reporting Tools to Threat Response Platform
Proofpoint has updated Threat Response, its threat management platform. Users can now integrate alerts across security solutions from Proofpoint, FireEye, Palo Alto Networks, Splunk and other vendorS.
Proofpoint (PFPT) is allowing Threat Response users to leverage incident management lifecycle technology to mitigate and prevent cyber attacks.
The Sunnyvale, California-based security-as-a-service (SECaaS) provider has updated Threat Response, its threat management platform, and noted that users can now integrate alerts across security solutions from Proofpoint, FireEye (FEYE), Palo Alto Networks (PANW), Splunk (SPLK) and other vendors “to investigate, verify, prioritize and contain today’s advanced threats.”
Threat Response automates the incident management lifecycle while delivering consistent information to users and streamlining collaboration and workflow, according to Proofpoint.
The threat management platform’s new features include:
IOC confidence scores — Threat Response’s indicators of compromise (IOC) confidence scores are designed to help security teams determine if a user is infected based on data collected from endpoints and detection sandbox reports.
Advanced reporting tools — Proofpoint said its advanced reporting tools deliver “a performance snapshot that details the time it takes IT security teams to review, assign and close cases.”
Event data and visualization capabilities — Users can access attacker details, including threat type, sandbox analysis results and reputation data, and the platform automatically prioritizes security incidents that require action.
“Rapid response to customer cybersecurity incidents is a priority for any provider. The enhancements in Proofpoint Threat Response enable a faster response to and containment of known and unknown threats, in a more efficient way, better leveraging staff and resources,” Mike Horn, Proofpoint’s vice president of Threat Response, told Talkin’ Cloud.
Click here for Talkin’ Cloud’s Top 100 CSP list
Proofpoint was named a “Leader” in the 2014 Magic Quadrant for Enterprise Information Archiving, and Horn noted that the SECaaS provider is committed to the development of “multi-vector security solutions for blocking cyber attacks, detecting advanced threats, automating incident response and reducing the impact of potential breaches.”
Share your thoughts about this story in the Comments section below, via Twitter @dkobialka or email me at [email protected].
About the Author
You May Also Like