eLearningClasses.com
Editorial & Advertiser Disclosure Global Banking And Finance Review is an independent publisher which offers News, information, Analysis, Opinion, Press Releases, Reviews, Research reports covering various economies, industries, products, services and companies. The content available on globalbankingandfinance.com is sourced by a mixture of different methods which is not limited to content produced and supplied by various staff writers, journalists, freelancers, individuals, organizations, companies, PR agencies Sponsored Posts etc. The information available on this website is purely for educational and informational purposes only. We cannot guarantee the accuracy or applicability of any of the information provided at globalbankingandfinance.com with respect to your individual or personal circumstances. Please seek professional advice from a qualified professional before making any financial decisions. Globalbankingandfinance.com also links to various third party websites and we cannot guarantee the accuracy or applicability of the information provided by third party websites. Links from various articles on our site to third party websites are a mixture of non-sponsored links and sponsored links. Only a very small fraction of the links which point to external websites are affiliate links. Some of the links which you may click on our website may link to various products and services from our partners who may compensate us if you buy a service or product or fill a form or install an app. This will not incur additional cost to you. A very few articles on our website are sponsored posts or paid advertorials. These are marked as sponsored posts at the bottom of each post. For avoidance of any doubts and to make it easier for you to differentiate sponsored or non-sponsored articles or links, you may consider all articles on our site or all links to external websites as sponsored . Please note that some of the services or products which we talk about carry a high level of risk and may not be suitable for everyone. These may be complex services or products and we request the readers to consider this purely from an educational standpoint. The information provided on this website is general in nature. Global Banking & Finance Review expressly disclaims any liability without any limitation which may arise directly or indirectly from the use of such information.

Exabeam Adds Updated Case Management Module to Flagship Behavioural Analytics Product

Integration streamlines security incident remediation by bringing together investigation and response in combined workflows

Exabeam, the next-gen security management company, today announced the addition of case management functionality into Exabeam Advanced Analytics and Exabeam Entity Analytics, its market-leading user and entity behaviour analytics (UEBA) solutions.

The case management offering helps security teams organise and streamline their response efforts to boost security operation center (SOC) productivity.

Exabeam Case Management is an optional module that provides a customisable user interface designed for the workflows of security teams, and that adds intelligence to help analysts resolve incidents more efficiently. Machine learning helps make the interface context aware, presenting users with relevant fields, values, and data for different incident types. The resulting workflows bring pertinent details to analysts when and where they are needed.

New features of the Exabeam Case Management module are:

  • Incident Cards – graphical cards on each analyst’s Exabeam home page show both active incidents being worked and pending in their queue, prioritised by severity. The integration with behavioural analytics allows automatic creation of tickets based on incidents with a high risk score. This is an easy way to increase the daily productivity of security analysts at all tiers.
  • Workflow Management – with appropriate permissions, analysts can see incidents being worked by their peers and request a merge or escalation as appropriate. This is in addition to the existing capabilities that include workflow definition, case reassignment, ticket tracking, incident triage and case escalation. The increased visibility improves collaboration and reduces redundant work in the SOC.
  • Case Context – analysts will see associated security incidents related to their cases in the Advanced Analytics and Entity Analytics interfaces. Threat indicators and relevant artifacts are automatically added to cases. This gives security analysts broader context and allows for human intuition to add to the analytics within the system.

“Many security analysts are using generic IT service management tools to automate their security operations. Historically, ticketing and workflow capabilities for the SOC have either been ‘borrowed’ from departments outside of security, or poorly implemented over the rudimentary functionalities provided by legacy SIEMs. Not only are these tools not customized for security applications, but they are not integrated into the security detection and investigation tools used by the analyst,” said Sylvain Gil, vice president of products and co-founder at Exabeam. “Exabeam Case Management is the first SOC-native case management solution, designed to save analysts time and make them more efficient by integrating security ticketing and workflows into the product. This enables a seamless workflow from detection to triage to remediation.”

Exabeam Case Management is currently in beta testing and is expected to be released next month. It will be demonstrated at Exabeam’s user conference Spotlight 18. For more information on the new case management module, please visit https://www.exabeam.com/product/exabeam-advanced-analytics/.