Check Out Exabeam Incident Responder
- Feb 10, 2017
- Exabeam Editor
- 1 minute to read
Table of Contents
Response process defined
One of the most common questions we heard when talking to potential customers about our UEBA product was “Okay, your system found something. Now what do I do?” It was eye-opening to see so many organizations that simply didn’t have response processes defined, and had limited tools to run those processes, anyway. This lack of incident response expertise drove the development of our recently-announced Exabeam Incident Responder product.
Pre-defined playbooks
Incident Responder goes far beyond the automatic investigation timelines created in Exabeam UEBA. It comes with pre-defined playbooks for common incident types such as malware, phishing, and data exfiltration. These playbooks include actions that can automatically run (e.g. go get reputation data for this IP address) or guide a team member (reset this user’s password). As actions complete, they are displayed in cards, in a Pinterest-like canvas. Responders can share notes and actions with team members, as well.
A major goal with Incident Responder was to take the best practices currently performed by your “ninjas” and make those available to anyone, even your interns.
Learn More About Exabeam
Learn about the Exabeam platform and expand your knowledge of information security with our collection of white papers, podcasts, webinars, and more.
-
Blog
What Is the Difference Between Exabeam and CrowdStrike for SIEM and Security Operations?
-
Blog
Access Isn’t Trust: A Behavioral Risk Framework for People, Service Accounts, and AI Agents
- Show More
