Autonomic Security Operations (ASO) Training: Security Analytics

Transcript of the video:

ActOns and threats originate from situations, and situations are linked in a couple of ways: services or escalation policies. As seen in this example, the situation was escalated and assigned to Robo. Robo is not a person. Robo is the internal situation analysis engine that generated and produced everything you saw on the ActOn and alerted Ravi Kumar, specifically with that information.

The All Services page and function is a fantastic feature because not only do we get the ActOns, but we also get hyperlinks to assets within the environment from which we can apply specific routing, action, or analysis.