Newsletter Subscription

A Laser Focus World newsletter subscription is free to qualified professionals:

The Daily Beam

Showcases the newest content from Laser Focus World, including photonics- and optics-based applications, components, research, and trends. (Daily)

Product Watch

The latest in products within the photonics industry. (9x per year)

Bio & Life Sciences Product Watch

The latest in products within the biophotonics industry. (4x per year)

Laser Processing Product Watch

The latest in products within the laser processing industry. (3x per year)

Cyware Launches Threat Defender Repo Sharing to Take Security Collaboration Beyond Threat Indicators (IOC) Sharing

By: Cyware via Business Wire

October 03, 2022 at 10:00 AM EDT

The new capability will enable security teams to share threat detection, threat hunting, and threat defense rules, analytics, and files with other members of an ISAC or ISAO

Cyware, the industry’s leading provider of the technology platform to build low-code SOAR and intel automation-powered Cyber Fusion Centers for enterprises and threat intelligence sharing for ISACs and ISAOs, has expanded its technology offering with the first ever threat defender collaboration network by allowing the sharing of rules, analytics, and files used in cyber threat detection, threat hunting, and threat defense. Until recently, threat sharing through ISACs was limited to Indicators of Compromise (IOC) between threat intelligence teams, but now the new technology offering by Cyware will eliminate silos between security operations center (SOC), incident response, and threat hunting teams within organizations and foster collaborative synergies against advanced cyber threats at sectoral (ISAC-to-Member) and cross-sectoral (ISAC-to-ISAC) industry levels.

The Threat Defender Library (TDL), a new capability within Cyware’s threat advisory sharing and security collaboration platform (CSAP) version 3.5 and onwards, functions as an exclusive repository for security teams to store, collaborate, and share threat detection files, threat response automation rules, and threat analytics files between organizations, enabling siloed security teams to quickly detect and respond to organization-specific alerts by enhancing their existing threat defense, threat hunting, and threat detection/response workflows. Security teams can build their own knowledge repository for threat defenders to craft their mitigation strategies using Cyware’s out-of-the-box templates in addition to visualizing critical security metrics and sharing the defender content with security teams at other organizations within their sector in real-time.

Using the Threat Defender repository feature, security teams can create, upload, maintain, collaborate, and share:

SIEM Rules files
Threat detection files including Yara rules, Sigma rules, log sources, Suricata, Snort Rules, and more
Analytics files such as CAR
Response files such as Automated Playbooks
MITRE ATT&CK data including tactics, techniques, and sub-techniques

Speaking at the launch, Anuj Goel, CEO and Co-founder at Cyware said, “The Threat Defender initiative is a result of our close interactions with hundreds of CISOs, Heads of SOC, Incident Response, and Threat Hunting teams across organizations and industry sectors who time and again have echoed the need for security collaboration that results in positive, actionable outcomes for all. The Threat Defender collaboration technology developed by Cyware will enable security teams from organizations of all types and sizes to work together to hunt for tell-tale signs of malicious cyber activity and prevent threat actors from penetrating into enterprise systems and networks.”

Benefits of Threat Defender Library for Security Teams

The Threat Defender initiative will encourage security collaboration across industry sectors by enabling teams from one organization to learn threat detection and mitigation strategies from security teams at other organizations. In the past, security collaboration was largely limited to the sharing of threat intelligence, but now, with this new capability, security teams can share threat indicators (IOC) as well as threat detection and defensive files to proactively mitigate threats using a single, centralized technology platform. Additional benefits of the Threat Defender Initiative include the ability to:

Gain visibility into proven threat detection and mitigation strategies put in place by security teams from different organizations and industry sectors.
Quickly respond to organization-specific threats by reusing the shared detection, analysis, and response files.
Reduce time spent by analysts in researching and developing mitigation and containment strategies against threats.
Mitigate common threats and act faster by actioning shared threat analysis and detection files such as SIEM Rules into deployed SIEM or XDR platforms.
Increase threat hunting capabilities and significantly reduce mean-time-to-detect (MTTD) and mean-time-to-respond (MTTR) to security threats or incidents.
Visualize a centralized mapping of threats and detection content against threat methods used by threat actors.

Cyware brings together historically siloed security operations, allowing organizations to share threat data more efficiently, and collaborate on threat response within their security functions as well as with other organizations within their network. The new threat defender capability, along with recently launched ISAC-to-ISAC threat intelligence sharing, TLP 2.0 adoption for threat intelligence sharing, and integration of CISA’s Automated Indicator Sharing (AIS) threat data into Cyware’s sharing network, will add more fuel to security collaboration between organizations and strengthen the cyber resilience across industry sectors.

To learn more about how Cyware enables holistic threat sharing and security collaboration, visit cyware.com.

About Cyware

Cyware helps enterprise cybersecurity teams build platform-agnostic cyber fusion centers by delivering cyber threat intelligence and next-generation low-code SOAR (security orchestration, automation, and response) solutions. As a result, organizations can increase speed and accuracy while reducing costs and analyst burnout. Cyware's Cyber Fusion solutions make secure collaboration, information sharing, and enhanced threat visibility a reality for MSSPs, enterprises, government agencies, and sharing communities (ISAC/ISAO) of all sizes and needs. cyware.com

View source version on businesswire.com: https://www.businesswire.com/news/home/20221003005194/en/

The Threat Defender collaboration technology [...] will enable security teams from organizations of all types and sizes to work together to hunt for tell-tale signs of malicious cyber activity and prevent threat actors from penetrating systems & networks.

Contacts

Katie Brown

katie.brown@cyware.com

About Us

Laser Focus World Membership

Magazine Subscription

Newsletter Subscription

The Daily Beam

Product Watch

Bio & Life Sciences Product Watch

Laser Processing Product Watch

Get Published!

Photonics Hot List

Following the Photons: A Photonics Podcast

Social Media

Meet the Laser Focus World Team

Editorial

Sales

Editorial Advisory Board

Cyware Launches Threat Defender Repo Sharing to Take Security Collaboration Beyond Threat Indicators (IOC) Sharing

Contacts

More News