Security

Splunk Mission Control launch enables a unified SOC


Data analytics software vendor Splunk Inc. this month introduced Splunk Mission Control, a cloud-based tool that…

“;
}
});

/**
* remove unnecessary class from ul
*/
$(“#inlineregform”).find( “ul” ).removeClass(“default-list”);

/**
* Replace “errorMessageInput” class with “sign-up-error-msg” class
*/
function renameErrorMsgClass() {
$(“.errorMessageInput”).each(function() {
if ($(this).hasClass(“hidden”)) {
$(this).removeClass(“errorMessageInput hidden”).addClass(“sign-up-error-msg hidden”);
} else {
$(this).removeClass(“errorMessageInput”).addClass(“sign-up-error-msg”);
}
});
}

/**
* when validation function is called, replace “errorMessageInput” with “sign-up-error-msg”
* before return
*/
function validateThis(v, form) {
var validateReturn = urValidation.validate(v, form);
renameErrorMsgClass();
return validateReturn;
}

/**
* DoC pop-up window js – included in moScripts.js which is not included in responsive page
*/
$(“#inlineRegistration”).on(“click”,”a.consentWindow”, function(e) {
window.open(this.href, “Consent”, “width=500,height=600,scrollbars=1”);
e.preventDefault();
});

provides customers a unified Security Operations Suite, which includes Splunk Enterprise Security, Splunk Phantom and Splunk User Behavior Analytics.

The new product is aimed at unifying data, analytics and operations into a single experience to let team members of a security operations center collaborate in sync, according to the company.

Customers of Splunk Security Operations Suite can act on threats and other security issues throughout an event lifecycle. The suite also supports investigation and search across multiple on-premises and cloud-based instances in Splunk Enterprise and Splunk Enterprise Security and provides ChatOps collaboration, case management and automated response.

“Splunk’s Security Operations Suite not only enables customers to identify threats but [also] analyze them, investigate the source, report on any vulnerabilities discovered and plan how to prevent similar occurrences in the future,” said Haiyan Song, senior vice president and general manager of security markets at Splunk. Other specific use cases of the product include threat hunting, compliance, insider threat detection, remediation and automation/orchestration, she added.

Splunk Mission Control is in beta; the company has not specified a general availability date.

Other vendors in the security information and event management market include IBM, SolarWinds and McAfee. IBM QRadar is a cloud-based service offering network security intelligence and analytics to let organizations detect cybersecurity attacks and network breaches and take action to respond to data losses. SolarWinds’ Security Event Manager touts automated threat detection and response, as well as integrated compliance reporting tools. McAfee Enterprise Security Manager also offers built-in compliance framework and analysis that helps guide organizations’ threat investigation and remediation.


Source link

Tags

About the author

GG

Add Comment

Click here to post a comment

Your email address will not be published. Required fields are marked *

Do NOT follow this link or you will be banned from the site!