AST 2018 CHAMPIONS EDITION AST 2018 CHAMPIONS EDITION | Page 85

Volume 30 Alert numbers have you drowning? Security CHAMPIONS Edition stacks grow every day. 2018 Business risk is real. Demisto’s orchestration engine automates security product tasks and weaves in human analyst tasks and workflows. Demisto Enterprise, powered by its machine learning technology, acquires knowledge from real-life ana- Demisto lyst interactions and past investigations to help SOC • Platinum ‘ASTORS’ Award Winner teams with analyst assignment suggestions, playbook • Demisto Enterprise • Best Security Orchestration, Automation and enhancements, and best next steps for investigations, so the platform (and you) get smarter with every analyst Response (SOAR) • *Demisto is also a 2017 ‘ASTORS’ Award WInner action. Demisto Enterprise is a comprehensive SOAR platform that combats challenges by combining secu- rity orchestration, incident manage- ment, and interac- tive investigation into a seamless expe- rience. (Security orchestration is an evolving term that has many components and is easy to misunder- stand. In this edition of DBytes, Demisto gives a brief overview of security orchestration, why it’s needed, and an example to round things off. Additionally, Demisto’s solution has helped Security Operations Cen- ter (SOC) teams reduce the number of alerts requiring human re- view by as much as 95 percent. Demisto also solves the ever-growing problem of product fatigue – where analysts need to learn more products to mitigate threats throughout their infrastructure. As a platform designed to integrate with all major security products such as Security Information and Event Management (SIEM), network se- curity, threat hunting, and endpoint tools, Demisto Enterprise provides analysts a comprehensive view into incident response. 85