Foundation for Google Chronicle
Ingest all your data at scale and speed. Observe everything across multiple tenants. Blazing fast setup takes a day.
Platform Overview
Resolution Intelligence Cloud optimizes operations
How Resolution Intelligence Cloud works
“The important thing to remember about a platform like this is that all this data generation and analysis is done behind the scenes, by the automated systems built into the platform. By doing data analysis and correlation, the platform lets analysts and operators focus on solving problems and the tasks at hand.”
Matt Bromiley
| Certified Instructor, SANS Institute
|
Align security operations to your business
Insights to act on
Stop the barrage of alerts. ActOns correlate alerts with asset and user data so you can act decisively on what matters most to the business now.
Prioritize by business risk
Save time and sanity: stop chasing false positives and know where to focus with priority scores aligned to business risk.
Advanced analytics
Detect unknowns with advanced anomaly detection, analytics, and ML across real-time data from hybrid cloud environments.
Collaboration war rooms
Create secure war rooms to collaborate with colleagues, customers, and other key stakeholders in a single place with extensive context.
Threat intel & detection
Discover top vulnerabilities and map threat trends with Threat Hunting Services, vulnerability disclosures, and advisories.
Fast resolution
Automate investigation and remediation tasks while providing your SOAR and ITSM with enriched context for faster resolution.
Ingest all your data
Resolution Intelligence Cloud ingests all your security and digital ops data, then identifies what matters most so you can proactively manage material risks to the business without constant fire drills.
-
Ingest all your data for comprehensive observability — and search on hot data for a year.
-
Automatically discover anomalies, assets, and vulnerabilities.
- Threat hunt.
-
Have the extensive context you need to effectively resolve critical issues.
Read about data ingestion and integrations.
Blazingly fast setup
It takes less than a day to set up the platform, multiple Resolution Intelligence Cloud tenants, and diverse data sources. Ingest terabytes in days.
- Connect directly to cloud data and populate Resolution Intelligence Cloud.
- Easily configure data feeds to Resolution Intelligence Cloud.
- See real-time ingestion health and analytics.
- Use the Content Management System for detection rules and parsers that run in your Resolution Intelligence Cloud instances.
Detect unknowns with behavioral analytics
- Detect anomalous behavior based on any attribute, not just user behavior and entity behavior.
- Run "what if" analyses to simulate situations and observe outcomes.
- Track abnormal activity — in other words, where there’s more or less than normal.
- Investigate anomalies with Conversational AI — no more manual pivots and queries.
- And more.
Have critical context with ActOns
Boost efficiency and effectiveness with the information you need at your fingertips. Resolution Intelligence Cloud generates actionable insights you can act on, called ActOns. ActOns present highly curated, contextual data — like related alerts, asset, and user data. You can focus on what matters most because ActOns are prioritized based on a risk score that’s aligned to your business and derived from likelihood, impact, and confidence. Click on ActOns to dive into details and investigate further.
Get sub-second search at Google scale
Enjoy blazing fast, sub-second search on petabytes of data that's stored hot for a year. With one click, pivot to investigate incidents further. You maintain control of your Resolution Intelligence Cloud instances and IP.
Security posture mapped to MITRE ATT&CK
Identify and remedy detection gaps with automated log mapping to the MITRE ATT&CK framework. ActOns display a MITRE mapping of the correlated events detected, giving you instant insights.
.png?width=1000&height=469&name=detection-coverage-against-threat-actors-1024x480%20(1).png)
Featured webinar
Watch this on-demand webinar where Matt Bromiley, a Certified Instructor at SANS Institute, reviews Netenrich’s Resolution Intelligence Cloud. Learn about key product highlights and where your enterprise can quickly find value by harnessing the vast quantities of data in your environments.
