SOAR allows security operations teams of multi-vendors environment to automate the tedious and repetitive elements of workflows that do not require human oversight while retaining human action and authority when necessary. The best SOAR solutions are designed to enrich and contextualise threat data to assist SOC analysts in swiftly triaging cases based on the severity of the risk, sensitivity of the data or resources under threat, or criticality of the business functions being targeted.
In this session, Nick will elaborate on the necessity for security operations teams to incorporate a security orchestration, automation, and response (SOAR) tool in order to amplify security operation efforts and accelerate incident responses. He will specifically highlight how FortiSOAR can be leveraged for these purposes and he will showcase its critical features through several illustrative use cases.
This demo showcases FortiNDR On-Prem's capabilities, including Intrusion Prevention System (IPS) for comprehensive traffic analysis (north/south/east/west). It also highlights advanced malware detection using Artificial Neural Networks (ANN) to identify and trace ransomware threats. Additionally, FortiNDR On-Prem utilizes Machine Learning (ML) to create network segment baselines and identify suspicious traffic anomalies.
