PRODUCT INTRODUCTION
LogEase SOAR solution automates responses using playbooks defined for various
security incidents, focusing on case management driven by 'Event' and 'Case.' This
approach emphasizes clear, decision-oriented technical implementation, requiring
visual process orchestration, componentization (application management), and case
management capabilities.
PRODUCT FEATURES
Componentization Capabilities
In the LogEase SOAR playbook, users can orchestrate using common and application components. Common components include logical functions like filtering, judgment, and formatting. Application components connect to external systems like threat intelligence, anti-DDoS, firewalls, and WAFs. Custom components allow Python-based development.
Playbook Orchestration Capabilities
For different security and vulnerability incidents, visual orchestration of components based on the response process reduces development costs, standardizes processes, and associates predefined playbooks with specific incidents for automated responses.
Case management capabilities
Upon receiving a security incident or vulnerability, an automated response case is generated, recording the handling process with detailed outputs for each step. The process can be broken down into subtasks and assigned to responsible individuals, enabling collaborative investigation and handling.
Componentization Capabilities
In the LogEase SOAR playbook, users can orchestrate using common and application components. Common components include logical functions like filtering, judgment, and formatting. Application components connect to external systems like threat intelligence, anti-DDoS, firewalls, and WAFs. Custom components allow Python-based development.
BENEFITS
Abundant Built-in Playbooks and Interface Components
Depending on the nature and type of security events, LogEase SOAR has more than 80 built-in security incident handling playbooks, covering more than 50 interface components, which are automatically triggered by security incidents to achieve an automated closed-loop processing of security events.
GUI-based Playbook Orchestration
LogEase SOAR provides a GUI-based playbook orchestration interface. Users can create and modify playbook logic in a drag-and-drop manner, reducing the development cost of automated processes and forming a standardized process at the same time.
Security Operation Efficiency Improved
Analyze the alerts of all security devices based on threat intelligence and use SOAR playbook to handle them in minutes. It helps reduce the MTTR (Mean Time To Response) efficiently.
LET'S ARRANGE A MEETING
Contact us and LogEase Support Team is here to answer it for you from Monday to Friday.
x