Palo Alto

Banking and Finance
One of biggest bank in Turkey
1 Main DC and 1 DRC

Requirements

Orchestrating SOC
Reporting SOC metrics
Reducing number of false positives
Automation scenerios for security incidents
Collabration framework for analysts
Hunting playbooks
Actionable Threat Intel Management

Solutions

XSOAR integrated all security incident sources, enrichment and response products.
Boldon James Use Case
Boldon James Use Case

Differentiations

SOC incidents deduplicated and reduced of number of incidents. (%80)
Increased productivity of existing security products. Especially they started to use sandbox, EDR and SIEM full feature.
Hunting playbooks populates custom layouts of SOC.
Having an action all realtime threat intel provided indicators.