Indietro
Today’s security operations require coordinated efforts from multiple team members, many of whom are in different roles and technology specializations. Complexity inhibits the ability to conduct time-sensitive operations such as incident response. Security engineers and the threat hunters have to be on the same page when it comes to establishing priorities and conducting investigation, across the entire detection & response lifecycle.
In recent years, security operation programs have reached new levels of maturity with respect to the tools that they need for threat identification, orchestration, and automated response. These tools make it possible for the SecOps teams to do more in less time. Towards this end, we have extensively worked to deliver Splunk and Phantom integration so enterprise security teams can work at addressing risks to cloud services and the corporate data that resides there.
The next frontier in SecOps is building a unified platform so that the various members of the security team have a common work surface. This is important because collaboration across different disciplines on a common problem set is easier if you can break down silos of knowledge.
We’re tremendously excited to see Splunk address this problem space with Splunk Mission Control. SecOps teams can use Splunk Mission Control to federate the responsibilities across the security event lifecycle from a common work surface. Our partnership with Splunk extends to Mission Control, and soon the SecOps team can use Netskope integration to seamlessly conduct their investigations and playbooks across cloud and web activity.
This will deliver a number of important benefits to Mission Control customers. Soon organizations will be able to look at cloud and web security events from Mission Control, thus extending the unrivaled view in applications, data, and user activity. As threat teams zero in on issues, security events can be searched from Splunk Mission Control and correlated with security events in other IT products, thus providing a way to connect the dots and drive real-time changes throughout the enterprise. These activities are also valuable for organizations that are looking at building a program for continuous compliance from Mission Control, thus allowing organizations to streamline security operations and establish stronger team efficiencies.
We believe that the network perimeter is dissolving, and workplaces are becoming physically fragmented. This is driving organizations to accelerate their adoption of cloud and extended mobile workforces. Working with Splunk Mission Control, organizations will be able to stay on top of security operations and directly apply their processes and knowledge across their cloud adoption strategy through seamless integration with Netskope.
Learn more about Netskope integration for Splunk Mission Control by joining us at Splunk’s .conf20, which is taking place online from October 20-22.
Leggi il blog