Coordinated, Automated, and Efficient Incident Response.
By integrating Mimecast with Cortex XSOAR, organizations gain search and correlation capabilities to detect and respond to cyberattacks from a central location - No needless pivoting between consoles. Cortex XSOAR is the perfect ally for security analysts, through a machine learning-powered platform which provides guidance based on past incidents and analyst actions, accelerates playbook development, and enables leaner, more efficient security operations.
Solution Overview
1. As inbound emails are received by Mimecast on behalf of the organization, they are subject to analysis by the Mimecast inspection funnel, where a series of email hygiene and advanced security scanning techniques are applied, to ensure that emails are safe before they are delivered to the recipient.
2. Email related data from Mimecast ingested into the IBM Security platform to help with analyst investigations.
3. Coordinate response actions across security tools based on Mimecast data.
4. Adjust Mimecast policies, search and destroy malicious emails, or prevent future threats.
Mimecast & Palo Alto Cortex Use Cases:
Coordinated response aiding in:
Automated Email Enrichment
Complex Email Threat Investigation
Alert Prioritization
Threat Intelligence
Key Benefits
01.
Automate email security processes, shorten the decision-making cycle, and drive resource efficiency through automation.
02.
Enrich email and network security threat intelligence with Mimecast and other security tools for coordinated incident response.
03.
Reduce email-threat alert fatigue and speed-up incident response with full orchestration using proactive playbooks and workflows.