Syncurity IR Flow - RSA NetWitness Implementation Guide

Tags: Orchestration

Column 1: Within IR Flow, automation refers to the ability to define and execute routine alert or incident-related tasks using technology vs. separate manual actions. Orchestration within IR Flow refers to leveraging programmable, third-party APIs to take a proposed incident action, such as gathering information for enrichment, direct containment or establishing a ticket for remediation

Attachments:
Syncurity_IR_Flow_5_RSA NetWitness_11_2.pdf