Endace Integrates with Palo Alto Networks Cortex XSOAR to Deliver Forensics for Accelerated Response to Cyberthreats

Integration combines EndaceProbe Analytics Platform with Cortex XSOAR to simplify and accelerate cybersecurity investigations with definitive, network-wide packet history

ID: 1558497
recent pressrelease next pressrelease

(businesspress24) - London, UK, Austin, TX and Auckland NZ, June 2, 2020 – Endace, a world leader in high-speed network recording, playback and analytics hosting, today announced that the EndaceProbe Analytics Platform, is now integrated with Palo Alto Networks Cortex XSOAR (previously Demisto), the industry’s first extended security, orchestration, automation and response platform with native threat intel management that empowers security leaders with instant capabilities against threats across their entire enterprise. Through this integration, Endace and Cortex XSOAR provide customers with network packet capture from within Cortex XSOAR playbooks to enable accelerated, evidence-led, forensic investigation of cyberthreats.

The integration leverages Endace’s rapid-search and data-mining APIs to integrate network history into Cortex XSOAR. Using Cortex XSOAR’s powerful automation capabilities, the full packet history relating to specific security incidents is automatically retrieved from one or more EndaceProbes and provided back to analysts as definitive forensic evidence.

Analysts can leverage Cortex XSOAR’s integration with Endace’s InvestigationManager™ and EndaceVision™ for detailed packet level investigations across global EndaceProbe estates. This lets them pivot from an investigation in Cortex XSOAR directly to the global packet history related to that incident to extend their investigation and drill down to investigate associated network activity such as lateral movement, data exfiltration or command-and-control (C2) traffic.

“Endace’s scalable, network-wide full packet capture is a powerful addition to the Cortex XSOAR ecosystem,” said Rishi Bhargava, vice president of product strategy, Cortex XSOAR at Palo Alto Networks. “It provides customers with rapid access to rich forensic evidence for investigating security incidents and the ability to include packet history into Cortex XSOAR use cases and playbooks to put definitive evidence at analysts’ fingertips.”



“Security teams are desperate to combat alert fatigue, streamline workflows and accelerate investigations to provide certainty when responding to network threats,” says Cary Wright, VP of Product Management at Endace. “The combination of Cortex XSOAR’s powerful orchestration and automation capabilities with the rich network history recorded by the EndaceProbe Analytics Platform gives security operations access to the conclusive forensic evidence they need to respond quickly and accurately to threats.”

Cortex XSOAR is an extended security orchestration, automation and response platform that unifies case management, automation, real-time collaboration and threat intel management to transform every stage of the incident lifecycle. Teams can manage alerts across all sources, standardize processes with playbooks, take action on threat intel and automate response for any security use case - resulting in significantly faster responses that require less manual review.

The EndaceProbe Analytics Platform combines 100% accurate, network-wide packet capture with the ability to host and integrate with a wide range of commercial and open source network security and performance solutions to deliver definitive evidence for troubleshooting network and application performance issues and responding to cyberthreats.



More information:
http://https://www.realwire.com/releases/Endace-Integrates-with-Palo-Alto-Networks-Cortex-XSOAR



Company information / Profile:

PressRelease by

published by: RealWire
print pressrelease  pressrelease as PDF  send to a friend  

Date: 06/02/2020 - 08:02
Language: English
News-ID 1558497
Character count: 3567
Kontakt-Informationen:
Firma: RealWire
Ansprechpartner: Samantha Wiles Feedback to businesspress24.com about Pressrelease-id:
Stadt: Lincoln
Telefon: 01522883640

Meldungsart: bitte
Versandart: Veröffentlichung

Number of hits: 437

Linking-Tips:



Direct Link to this PressRelease:






We would appreciate a link in your News-, Press- or Partner-Site.

Comments on this PressRelease






All members: 9 438
Register today: 0
Register yesterday: 0
Members online: 0
Guests online: 57


Don't have an account yet? You can create one. As registered user you have some advantages like theme manager, comments configuration and post comments with your name.