Infoblox’s New AI-Driven SOC Insights Reduce Cybersecurity Response Times

Cloud-native security and networking provider Infoblox Inc. today announced “SOC Insights,” a new AI-powered security operations solution that improves Domain Name System detection and response as part of the company’s BloxOne Threat Defense solution. .

Designed to enable security analysts to jump-start investigations, SOC Insights reduces response times by transforming security events, networks, ecosystems, and unique DNS intelligence data into a manageable set of immediate, actionable insights. speed of AI, according to the company.

Infoblox claims that SOC Insights goes beyond simple malware risk-based dashboards and enables cybersecurity teams to reduce average response time by eliminating wasted time by consolidating individual alerts into single insights. Each overview provides easy access to details of the device, event, attacker infrastructure, and Infoblox’s unique DNS intelligence data. According to the company, this eliminates the need for SecOps teams to spend time tracking each individual alert or waiting on NetOps for user and device information to learn the context of threat activity.

Using SOC Insights with Infoblox BloxOne Threat Defense helps eliminate critical SecOps challenges, such as managing increasingly complex cyberattacks. SecOps teams can apply unique DNS threat intelligence to identify threats missed by other tools and proactively disrupt adversary infrastructure to stop threats before they occur, Infoblox claims.

The solution addresses alert fatigue by quickly identifying the most important events by reducing hundreds of thousands of alerts to a more manageable set of information and incident response times are reduced by eliminating wasted time collecting, filter and interpret large amounts of unique event, network and DNS intelligence data.

It can also be useful with existing security tools, enabling the sharing of AI-driven insights with correlated and filtered data to make other tools in the security stack more effective, further improving the effectiveness of SOC tools and teams.

“SOC Insights is a game changer for SecOps, allowing them to focus on what really matters, especially when faced with limited budget and resources,” said Craig Sanderson, vice president of security and of product management at Infoblox. announcement. “At Infoblox, we envision a future in which AI-driven analytics and DNS-based intelligence will dramatically increase the effectiveness of SecOps, with SOC Insights setting the industry standard. »

Photo: Infoblox