Videos & Webinars | Netenrich

Autonomic Security Operations (ASO) Training: Security Analytics

Written by Netenrich | Sep 26, 2023 1:21:04 PM

ActOns are linked to services and escalation policies. In this video, we demonstrate:


1) how Resolution Intelligence Cloud's internal situational analysis engine, known as ROBO, generates and routes ActOns based on escalation policies.

2) how all services provide not only ActOns, but also hyperlinks to assets in the environment where you can apply specific routing, action, or analysis.

 


Transcript of the video:

ActOns and threats originate from situations, and situations are linked in a couple of ways: services or escalation policies. As seen in this example, the situation was escalated and assigned to Robo. Robo is not a person. Robo is the internal situation analysis engine that generated and produced everything you saw on the ActOn and alerted Ravi Kumar, specifically with that information.

The All Services page and function is a fantastic feature because not only do we get the ActOns, but we also get hyperlinks to assets within the environment from which we can apply specific routing, action, or analysis.