Demisto: Security Orchestration, Automation, and Response (SOAR)

The Operating System for Enterprise Security

Understaffed security teams struggle to follow standard processes in the face of rising alert volumes and product proliferation. Demisto, a Palo Alto Networks company, and Security Orchestration, Automation, and Response (SOAR) have emerged to fill in these industry gaps and help analysts breathe a little easier.

Demisto’s orchestration enables security teams to ingest alerts across sources and execute standardized, automatable playbooks for accelerated incident response. Demisto’s playbooks are powered by hundreds of integrations and thousands of security actions, striking the right balance between rapid machine execution and nuanced human oversight.

Demisto’s playbooks are complemented by real-time investigation capabilities so that teams can rapidly iterate to solve emergent threats. Each incident in Demisto has a War Room view, which is a shared collaborative workspace where analysts can chat with each other, run commands in real-time, and have all their actions documented for future learning.

Demisto’s incident management facilitates standardized response for high-quantity attacks while also helping teams adapt to sophisticated, one-off attacks. Multi-source data ingestion, six focused incident views, fully customizable summaries and fields, and widget-based dashboards and reports ensure that analysts have complete visibility across the incident lifecycle.

Demisto’s machine learning capabilities increase responder productivity, accelerate playbook development, and enable leaner, more efficient security operations. DBot learns from incident, indicator, and analyst data and provides personalized insights such as analyst assignment to incidents, commonly run security commands, playbook task inputs, and related incident maps.

Some popular SOAR use cases include Phishing enrichment and response, Threat hunting, IOC enrichment, Incident severity assignment and others.

You can download an overview of Demisto here or find more details on the Demisto product page.

For more information on this exciting new addition to the Palo Alto Networks family, please contact your local Exclusive Networks Account Manager.