Cybereason provides the most innovative endpoint protection platform on the market, with multi-layered prevention, detection, response, and remediation via a single agent and accessible through a single console. Cybereason’s unique data centric approach provides unmatched visibility to understand the full scope and impact of an attack, increases analyst efficiency and effectiveness, and reduces security risk, giving you the power to stop even the most advanced attacks.
The Cybereason SIR app for ServiceNow enables users to leverage the power of the Cybereason Platform within the ServiceNow SecOps workflow. Using the app, SOC analysts and IT admins can migrate their endpoint protection management to ServiceNow SecOps. Such workflows include:
- Automatic triage of security breaches.
- Proactive security investigation and threat hunting.
- Actionable reports summarizing protected and detected threat actors.
The Cybereason SIR app can be used to create Security Incidents for Malop and Malware incidents already present in the Incident Table. Users can additionally update the Malop State and update the Assignment Group from within the Cybereason SIR app.
- ServiceNow SecOps
- Cybereason Endpoint Protection Platform already installed in ServiceNOW Instance
- Cybereason v20.1+