In an effort to provide its customers with the most efficient way to gain insight into and situational awareness of their security and intelligence, ThreatConnect is introducing new platform features and capabilities. With built-in and customisable dashboards and the new TAXII server in ThreatConnect’s latest release, users will be able to derive more metrics-based insights into threats and the actions teams take in response.
With ThreatConnect Dashboards, TC ManageTM, TC AnalyzeTM, and TC CompleteTM customers are able to easily visualise data that displays the impact of their security efforts and gain a better understanding of the threats their organisations face. Customers are able to automatically monitor their security operations and intelligence in a way that is actionable and relevant for their teams. By viewing the built-in dashboards or creating their own and adding custom metrics - even from outside of ThreatConnect - analysts are able to make critical security operations decisions and act to mitigate them quickly.
With the power of data to gauge and observe trends, activities, and performance, the dashboard feature provides customers the ability to:
- See meaningful data immediately: monitor recent history, open tasks, active incidents, false positives and more. Also, there is an added capability to view specific data and dig deeper from the dashboard.
- Build insightful dashboards: prioritise how information is viewed and determine the best way to display the information using a variety of charts and graphs.
- Personalise dashboards: teams are able to build and configure their own dashboards for their own use or to share with others in the organisation.
Andy Pendergast, vice president, product at ThreatConnect, said, “Dashboards is a powerful feature that will provide valuable insights to our customers from all the systems and data that they plug into Threatconnect, which differentiates us from other vendors in our space. Our customers won’t need to log into multiple systems to get a clear picture of their intel and operations. Plus, they will be able to share the impact of their efforts and the resulting intelligence with their security team and other staff.”
Also in this release, ThreatConnect will offer a TAXII Server. Now customers can seamlessly manage TAXII-client enabled systems and tools that ingest data with the increasingly adopted STIX-TAXII standards. Security professionals who need to share enriched intelligence in a standardised way with other groups or associations are now able to connect a variety of TAXII clients directly in the ThreatConnect Platform, as well as leverage STIX-compliant data not found anywhere else (threat rating, confidence rating, and ThreatConnect’s proprietary ThreatAssess score).
Pendergast added, “Being able to just pass STIX data is not enough. It could just add more noise. You have to be able aggregate all of your threat data in one place, leverage our analytics to filter what's relevant and then distribute it to your security tools and systems seamlessly with confidence. With ThreatConnect, we put curated and relevant threat intelligence to work to reduce your time to detect and respond to threats.”
