Autonomic Security Operations (ASO) Training: Security Analytics

Transcript of the video:

ActOns and threats originate from situations, and situations are linked in a couple of ways - One is linked to services and one is linked to the escalation policies. As seen in this example, the situation is the one that was escalated and was assigned to Robo. Robo is not a person - Robo is the internal situation analysis engine that generated and produced everything you saw on the ActOn and alerted Ravi Kumar, specifically with that information.

The All Services page and function is a fantastic feature because not only do we get the ActOns, but they are also hyperlinks to assets within the environment from which we can apply specific routing, action, or analysis.