ThreatConnect, Inc.®, provider of the industry´s only intelligence-driven security operations platform, has released ThreatConnect version 6.0, the company said.
Among other features in this new release, ThreatConnect introduces Workflow, which allows security teams to investigate, track, and collaborate on information related to threats and incidents with automated and manual tasks and standardized, consistent processes — all from a central location.
Security team members using the ThreatConnect Platform now have a mechanism that correlates artifacts from an investigation to existing intelligence, as well as historical case data from past incidents and investigations. The Platform allows users to not only enrich cases with both internal and external threat intelligence, but also generate intelligence from those cases to be used to enhance detection, prevention, and to build out a library of relevant threats facing the organization.
In addition to Workflow, other 6.0 features include:
Custom User Roles – customers are now able to give access to the Platform to more users based on their specific and unique requirements without jeopardizing data or process integrity.
Unlimited Read-Only & Commenter User Licensing – allows customers with designated ThreatConnect licenses to provide unlimited read-only, commenter, and read-only API users to the team to enable more individuals the ability to explore data captured in the ThreatConnect Platform.
App Services – Users now have additional ways to loop ThreatConnect into their existing technology Stack, including custom Playbook triggers, Webhooks, and custom API´s. Furthermore, they can develop these capabilities directly from App Builder and new Service app integrations will be made available through App Catalog.
ThreatConnect, Inc. provides a proactive and efficient approach to security by enabling enhanced detection, shortened response, and reduced risk. Designed by analysts but built for the entire team (security operations, threat intelligence, incident response and security leadership), ThreatConnect´s intelligence-driven security operations platform is the only solution available today with intelligence, automation, analytics, and workflows in a single platform. To learn more about our threat intelligence platform (TIP) or security orchestration, automation, and response (SOAR) solutions, visit www.ThreatConnect.com.