RedSeal App for Incident Investigation

Splunk Community

RedSeal App for Incident Investigation

RedSeal App for Incident Investigation
Archived
RedSeal’s platform builds an accurate, up-to-date model of an organization’s entire as-built network to visualize access paths and prioritize what to fix, to protect your most valuable assets. Through RedSeal’s integration with Splunk, this App helps to accelerate Incident Response by providing security and network access context for incidents: 1) Lists all downstream critical assets reachable from the threat source by topology groups 2) Displays exact access paths from a threat source to each reachable target, and identifies the specific firewall(s) and configuration rules to help remediate and prevent the Incident from becoming a breach 3) Provides a dashboard to display security metrics, including your network’s ‘Digital Resilience Score’ This app requires Splunk Enterprise Security. Compatible with Splunk Enterprise Security: 5.3.1 - 6.2.0
0 topics and 0 replies mentioned RedSeal App for Incident Investigation in
Latest Topics
No posts to display.
Latest Replies
No posts to display.
Top Topics
No posts to display.
My Topics
No posts to display.