Mission Control: Using the Heads-Up Display to Speed Situational Awareness

This article is a part of a series describing key features of the Phantom Security Automation and Orchestration platform. In this installment of the series, we will explore how the Heads-Up Display (HUD) in Phantom Mission Control™ can shorten the resolution time for security events. The core objective of the HUD is to allow the … Continue reading Mission Control: Using the Heads-Up Display to Speed Situational Awareness

Mission Control: Integrated Case Management

In this installment of the series, we will explore how Phantom Mission Control™ integrates case management tasks into a security operations team’s workflow. By merging case management tasks into Mission Control, analysts save time and better preserve data by eliminating the need to shuttle data between the Phantom Platform and an external ticketing or case management system.

Mission Control: Mission Guidance Playbook and Action Recommendations

This article is a part of a series describing key features of the Phantom Security Automation and Orchestration platform. In this installment of the series, we will cover a new capability of the platform called Phantom Mission Guidance™. Mission Guidance uses reinforcement learning to make playbook and action recommendations to an analyst while processing a … Continue reading Mission Control: Mission Guidance Playbook and Action Recommendations

Mission Control: Improving Efficiency with the Analyst Queue

This article is a part of a series describing key features of the Phantom Security Automation and Orchestration Platform and how they work to improve the analyst experience. In this specific installment of the series, we will talk about the Analyst Queue.     While the Analyst Queue view is not explicitly part of the … Continue reading Mission Control: Improving Efficiency with the Analyst Queue

Mission Control: On-Demand Action Execution

This article is a part of a series describing key features of the Phantom Security Automation and Orchestration platform and how they work to improve the analyst experience and drive greater efficiency within the SOC. Introduction Analysts are easily overwhelmed in a SOC environment that uses many disparate tools. In fact, some SOCs have over … Continue reading Mission Control: On-Demand Action Execution

Mission Control: Artifacts Table

When analysts are working to understand, investigate, decide, and act on a security event, they need a view where all collected evidence for the event is easily accessible. The artifact table in Mission Control provides this view for Phantom users. The artifacts table makes data extremely quick and easy to access and operate on for an analyst.