AlienVault Threat Alerts in Spiceworks
Download as PPTX, PDF1 like2,164 views
The document discusses AlienVault threat alerts integrated with Spiceworks, allowing users to identify compromised hosts on their network without additional software deployment. It highlights the functionality of threat monitoring and alerts triggered by connections with known malicious IPs, leveraging data from the Open Threat Exchange (OTX), a crowd-sourced threat intelligence repository. The OTX aids in aggregating and validating threat data, significantly improving the detection and response capabilities against various cyber threats.
AlienVault Threat Alerts in Spiceworks
- 1. ALIENVAULT THREAT ALERTS COMING IN SPICEWORKS 7.1
- 2. ALIENVAULT THREAT ALERTS FOR SPICEWORKS SpiceHead Benefit: Identify compromised hosts in a monitored network without having to deploy Anti-Virus or any other agent Remediation advice from world’s largest crowd sourced threat intelligence database
- 3. HOW IT WORKS – THREAT MONITORING Internet Search for connections with known malicious hosts Customers’ Internal Assets In SpiceWorks
- 4. HOW IT WORKS – ALERT TRIGGERED Alert on connection with known malicious host Customers’ Internal Assets In SpiceWorks
- 5. THREAT ALERTS IN SPICEWORKS: DASHBOARD & DEVICE DETAILS PAGE AlienVault Threat Analysis for suspicious IP “SpiceWorks has found a connection with a potentially suspicious IP Address 77.240.191.89 on device tmg-mbh. “
- 6. ALIENVAULT THREAT ANALYSIS - SUMMARY
- 7. ALIENVAULT THREAT ANALYSIS - REMEDIATION
- 8. WHAT IS THE OPEN THREAT EXCHANGE? World’s largest crowd-sourced repository of threat intelligence Users of AlienVault OSSIM, USM and Reputation Monitor Alert can voluntarily contribute IP reputation data from devices in their environment Raw data is cleansed, aggregated, validated and published through OTX The AlienVault Labs team of security experts validates the data in OTX and contributes data from their research on sophisticated zero‐day threats including malware, botnets, phishing campaigns and more. Threat intelligence from a diverse install base greatly limits attackers’ ability to isolate targets by industry, location, size, etc: 500,000 malware samples analyzed per day 100,000 malicious IPs validated per day 8,000+ Global Connection Points in 140+ countries