on Jul 18, 2018 |
Within IR Flow, automation refers to the ability to define and execute routine alert or incident-related tasks using technology vs.
separate manual actions. Orchestration within IR Flow refers to leveraging programmable, third-party APIs to take a proposed
incident action, such as gathering information for enrichment, direct containment or establishing a ticket for remediation.
| Partner Product | RSA Product | Documentation & Downloads |
|---|---|---|
| Syncurity IR Flow | RSA NetWitness | Security Operations Implementation Guide (preview) |