Focusing on collecting tactical indicators of compromise (IOCs) like ,domains, IP addresses and hashes sin not enough– teams need to map or act . We need More context on phishing , malware , botnets and Additional IOCs. We need highly actionable insights
Director Cyber Security at a consultancy with 11-50 employees
Consultant
Mar 11, 2019
I would like a lot more AI capabilities in terms of trying to contextualize more information happening in the IT department, then correlate it into this product. This type of information would ensure that we understand attacks before they happen from a release standpoint and have good releases in the future. Right now, we see IBM as an industry leader, and we are happy with that. However, more can be done with Watson and other product capabilities within that group. I would like to see this added into the product in the future to improve mean time to detect and mean time to respond. Therefore, we would like to have more AI capabilities to detect threats and improve its productivity from a cybersecurity standpoint.
Threat Intelligence Platforms (TIP) are essential solutions designed to aggregate, analyze, and manage threat data, empowering organizations to anticipate and respond to cyber threats effectively.
With capabilities to automate threat analysis, TIPs integrate data from multiple sources, providing a comprehensive view of potential threats. By leveraging advanced analytics, these platforms help security teams correlate threat intelligence with internal data, enhancing their ability to...
It is very expensive.
I would like to see better integration with other systems, solutions, and vendors.
Focusing on collecting tactical indicators of compromise (IOCs) like ,domains, IP addresses and hashes sin not enough– teams need to map or act . We need More context on phishing , malware , botnets and Additional IOCs. We need highly actionable insights
I would like a lot more AI capabilities in terms of trying to contextualize more information happening in the IT department, then correlate it into this product. This type of information would ensure that we understand attacks before they happen from a release standpoint and have good releases in the future. Right now, we see IBM as an industry leader, and we are happy with that. However, more can be done with Watson and other product capabilities within that group. I would like to see this added into the product in the future to improve mean time to detect and mean time to respond. Therefore, we would like to have more AI capabilities to detect threats and improve its productivity from a cybersecurity standpoint.