LogicHub enhances its SOAR dashboard to effectively measure threat detection and response
LogicHub, the provider of the industry’s most complete security automation platform, announced new dashboards and analytics capabilities that provide a framework to effectively measure threat detection and response.
LogicHub announced enhancements to its SOAR dashboard, which provides a first of its kind user-friendly experience to track the success of security automation initiatives.
In addition, LogicHub also unveiled its Threat Detections dashboard, which allows security teams to use the MITRE ATT&CKTM framework, a globally-accessible knowledge base of adversary tactics and technique, as the threat hunting standard.
With these dashboards, LogicHub helps security analysts measure and report on how their SOAR platform is helping detect and resolve threats.
“Far too often, companies fail to collect metrics and focus on improving them, in spite of investing hundreds of thousands of dollars in a security automation initiative,” said Kumar Saurabh, CEO of LogicHub.
“With LogicHub’s ability to mimic the cognitive and intuitive skills of level-3 security analysts, analysts of all levels can easily understand and obtain measurable improvements, strengthening the security of the organization overall.”
Justifying your SOAR investment
Security analysts are drowning in alerts and false positives and require automated means to reduce the time and effort required to understand threats and respond accordingly.
LogicHub’s SOAR dashboard provides a full graphical view with readable explanations of each logical step along with final output and scores, so analysts can rapidly review and validate results.
Unlike other SOAR platforms, LogicHub provides analysts with insight and specific metrics around time saved, dollars saved, mean time to resolve (MTTR), alerts triaged, integrations used, data ingested, cases created, cases by status and playbooks executed.
With LogicHub, what once required a tenured SOC analyst is now available to all security analysts, regardless of their level of experience.
Threat hunting with MITRE ATT&CK
With such a large encyclopedia of attack techniques within the MITRE framework, it can be daunting to know where to start and how to manage the risk. With LogicHub, analysts can better understand how to assess, prioritize, and manage the risk of cyber attacks based on the MITRE ATT&CK framework.
LogicHub autonomously maps attacks to the framework in real time, delivering users immediate indicators and attack technique context. Unlike other solutions on the market, LogicHub uses machine learning to prioritize and highlight the main threats analysts should be aware of, eliminating the need to sift through the over 300 MITRE techniques available.
LogicHub allows analysts to easily visualize, track, and manage risk over time with LogicHub’s Threat Detection Dashboard and a detailed view of coverage and gaps on the MITRE ATT&CK Matrix view.
The LogicHub SOAR+ security automation platform offers what traditional SOAR tools are missing by delivering autonomous detection and response, advanced analytics and machine learning to automate decision making with extreme accuracy across historically disparate security operations.
With LogicHub, analysts are able to easily measure and validate outcomes of their SOAR investment through a single platform.