The Defensys company issued a new release of the Platform for incident response automation and SOC high efficiency Defensys SOAR v. 5.2. The new version provides users with an email communication tool and enhanced response playbooks capabilities.
One of the key Platform features is the built-in functionality of e-mail correspondence, which is implemented as a separate tab in the incident card. All messages are displayed in the familiar user form as in popular messengers. Herewith, an incident mail thread can be created either manually or automatically using response playbooks. For instance, you could set up an automatic start message requesting additional information immediately when an incident occurs. This increases the ease of communication during the incident handling process and saves time spent switching between the system interface and e-mail.
In the updated version, the Defensys company has improved response playbooks by setting up automatic handling of connector execution errors. Thereby, the Defensys SOAR users get better control over the playbook execution process. If a network failure occurs or an external system is temporarily unavailable, connectors will restart automatically without any human intervention.
Aside from that, the Defensys SOAR 5.2 introduces a new approach to configuring of automatic playbook starting. You can now set various triggers as a Platform start-up condition: create a new incident, change an existing one, or add a comment to the incident card.
Another innovation is global variables, a feature for more flexible script handling. It allows you to set a value once and use it within different response playbooks. Global variables allow secure data storage and can be used, for example, to manage authorization tokens in external systems.
“The new Platform functionality is primarily aimed at improving the usability of the system. In particular, in version 5.2 we continue to perfect automation mechanisms, which is one of the main values of the Defensys SOAR. Developing the product, we are always guided by current market demands and feedback from our customers. In this way, the new e-mail and response playbooks features significantly reduce users labor costs”- tells Andrey Chechetkin, Deputy CEO at Defensys.