cyphon v1
0 likes287 views
Cyphon is a platform that aggregates data from multiple sources like email, logs and social media. It enhances data through automated analysis and generates custom alerts that can be viewed by category, priority and source. Analysts can investigate alerts by exploring related data and annotating findings, or escalating important alerts through integration with ticketing systems like JIRA. Cyphon helps organize complex alert workflows for security teams.
cyphon v1
- 3. Overview Cyphon is a triage, enhancement, and decision-support platform that organizes your alert workflow. With Cyphon, you can: Aggregate data from numerous sources: email, logs, social media, and APIs. Enhance data with automated analyses, like geoip Generate custom alerts with push notifications Throttle alerts and bundle related incidents View alerts by category, priority, and source Investigate alerts and track work performed
- 4. security team struggle with notification overload alert fatigue and overload incidents it exposes your infrastructure communication and information leaving you open to security breaches and malicious cyber attacks
- 7. creates alerts for important data as it arrives, so youre notified when something of interest happens. You can prioritize alerts using custom rulesets, and bundle related alerts so you dont get inundated. Respond
- 8. making it easier to collaborate assign tasks and transition its streamlined workflow pioneering API integration make it easier than ever to share information and harness team member expertise
- 14. Cyphon Use Cases
- 15. Incident Management Many organizations manage post-processed security events as email notifications, which is incredibly inefficient. An inbox flooded with alert notifications creates an environment where critical issues are overlooked and rarely investigated. Cyphon eliminates this issue by throttling events and prioritizing them based on user- defined rules. Analysts can quickly investigate incidents by correlating other data sets against indicators that matter. They can then annonate alerts with the results of their analysis. Today, Cyphon supports integrations with Bro, Snort, Nessus, and other popular security products.
- 16. Social Media Monitoring Leveraging publicly available APIs, Cyphon can collect data from streaming sources. Search is based on keywords, geofencing, and adhoc parameters. Cyphon supports the current version of the Twitter Public Streams API.
- 24. Manual Install Also can install Cyphon by manual install with need to install some of service like : PostgreSQL/PostGIS RabbitMQ Logstash Elasticsearch and/or MongoDB Nginx or Apache
- 25. Questions ?!
- 26. Thanks J