The lifecycle of threat detection content not only involves landscape knowledge, threat analysis, prioritization, gathering the right data sets, parsing logs, writing threat detection logic, conforming to the required data models, testing, tuning and deploying, but also includes continuously monitoring the deployed content for performance and/or health related issues. Each of these has a plethora of challenges. It doesn’t end there. The deployed rules can produce a high volume of false positives making triage on the incident response side of the house complex. Further, adversaries are constantly evolving resulting in constant upkeep of the deployed rules. Analysts may have to leverage multiple tools and a lot of manual processes, including expensive consulting services, to effectively develop and maintain threat detection content. With all the resources in hand, the average time to build detection logic, test and finally deploy in production could take weeks and sometimes, months.

In fact, “implementing or maturing SOCs with a focus on threat detection and response along with prioritized data security investments” made it to the Gartner’s top 7 security and risk trends for 2019.

Considering all these challenges, have you ever imagined a solution that could offer you a full set of capabilities to fully manage the content development lifecycle in a collaborative fashion, both intra and inter-company, with AI-assisted content/building recommendations, and a code-less UI-driven detection content builder?

Introducing Anvilogic — A Collaborative SOC Content Platform

Having been in your shoes as SOC analysts, threat detection engineers, and SOC leaders in our prior lives, we very well understand your day-to-day challenges. With a primary mission of empowering SOC teams like you, to better defend your organization, is why we started Anvilogic. We envisioned a collaborative SOC content platform providing all the content development lifecycle components in one place, combined with the power of the community and assisted by machine learning algorithms resulting in simplification of the content development process shrinking from weeks or months to minutes or hours.

You can increase your threat detection coverage, reduce alert volume while increasing the efficacy, boost your productivity by reducing the tools and/or manual processes, collaborate with your team members and SOC members within your peer organizations during the lifecycle of the content development and systematically measure your detection posture by assessing your threat detection coverage and gaps pertaining to your data feeds and your priorities.

Today, we are proud to unveil the power of such a platform to the SOC teams across all enterprises with the announcement of the general availability (GA) of Anvilogic. Below is the latest release of features:

• Interactive Code-less Threat Scenario Builder
• Anvilogic Maturity Score (Beta)

With more than 30+ vetted trials and customers already using us in production, our GA version provides you the following set of benefits:

Build Correlations without Writing a Single Line of Code

Build risk-based and time-based sequence correlations & adversary recognition patterns interactively on top of various existing alerts (SIEM, EDR, Cloud, Next-Gen Firewalls, UBA etc.) using our code-less threat scenario builder producing a low number of high efficacy alerts.

Fun part — you need not be a SIEM language expert and won’t be writing a single line of code!

Obtain an Anvilogic Maturity Score

With the industry’s first programmatic way of assessing a company’s security posture, you can now determine your overall detection posture with insights into your coverage and gaps related to your data logging and threat detection capabilities

Increase Threat Detection Coverage

Deploy ready-to-use threat detection content, developed & curated by the Anvilogic domain expert network, using our one-click deployment experience

Collaborate Internally & with External Trusted Peers

Reduce time spent on your content building lifecycle by collaborating with your internal team members at the code level and with your industry peers by forming Trusted Groups

Manage Content Lifecycle Effectively

Manage content development, deployment, testing, collaboration and task management, all in one personalized Workspace, reducing operational costs and/or misalignments. Continuously monitor your deployed rules for performance and other health related issues

Take Control of Your SOC

Anvilogic not only helps SOC teams build content at a very rapid pace but also helps them manage alerts at scale. Our threat scenario builder democratizes the content development process enabling the SOC’s security experts to build scenarios without the necessity of SIEM language expertise. SOC managers and CISOs will now have an easier way to determine their current security posture and can leverage the Anvilogic maturity score to drive business prioritization and strategic investments.

And there are so many more features that you’ll love. Sign up here to request a free trial/demo.