Understanding Multi-Tenancy on the Phantom Platform

We recently introduced specialized support for Managed Security Service Providers (MSSPs) in the Phantom Security Operations Platform. Now Phantom natively supports the management of multiple customers from one instance, the approach to multi-tenancy most frequently requested by MSSPs. With multi-tenancy enabled, analysts working in a Security Operations Center (SOC) at a service provider can view … Continue reading Understanding Multi-Tenancy on the Phantom Platform

Announcing the Phantom 3.5 Security Operations Platform

Following a successful controlled release to the Phantom Community on February 22, we're happy to announce that the 3.5 release of the Phantom Platform is now Generally Available (GA)! With this release, we're redefining how we talk about the Phantom Platform. Introducing the Phantom Security Operations Platform!  In step with our customer's needs, the Phantom … Continue reading Announcing the Phantom 3.5 Security Operations Platform

Mission Control: Using the Heads-Up Display to Speed Situational Awareness

This article is a part of a series describing key features of the Phantom Security Automation and Orchestration platform. In this installment of the series, we will explore how the Heads-Up Display (HUD) in Phantom Mission Control™ can shorten the resolution time for security events. The core objective of the HUD is to allow the … Continue reading Mission Control: Using the Heads-Up Display to Speed Situational Awareness

Mission Control: Integrated Case Management

In this installment of the series, we will explore how Phantom Mission Control™ integrates case management tasks into a security operations team’s workflow. By merging case management tasks into Mission Control, analysts save time and better preserve data by eliminating the need to shuttle data between the Phantom Platform and an external ticketing or case management system.

Mission Control: Mission Guidance Playbook and Action Recommendations

This article is a part of a series describing key features of the Phantom Security Automation and Orchestration platform. In this installment of the series, we will cover a new capability of the platform called Phantom Mission Guidance™. Mission Guidance uses reinforcement learning to make playbook and action recommendations to an analyst while processing a … Continue reading Mission Control: Mission Guidance Playbook and Action Recommendations

Mission Control: Improving Efficiency with the Analyst Queue

This article is a part of a series describing key features of the Phantom Security Automation and Orchestration Platform and how they work to improve the analyst experience. In this specific installment of the series, we will talk about the Analyst Queue.     While the Analyst Queue view is not explicitly part of the … Continue reading Mission Control: Improving Efficiency with the Analyst Queue