AlgoSec App for Security Incident Analysis and Response (2.x)

AlgoSec’s business-driven security policy management solution helps make enterprises more agile, secure and compliant. Through a single pane of glass, AlgoSec provides holistic visibility across the entire network security infrastructure, including business applications and their connectivity flows. With AlgoSec users can auto-discover application connectivity, proactively analyze risk from the business perspective, and intelligently automate time-consuming security changes—all with zero-touch, and seamlessly orchestrated across any heterogeneous environment. Through AlgoSec’s integration with Splunk, this App enhances and automates the Security Incident Response process by: · Augmenting security incident data with business context · Automatically associating applications with compromised servers · Identifying network connectivity to/from a compromised server · Automatically isolating a compromised server from the network End-user documentation: https://www.algosec.com/docs/en/asms/a30.10/asms-help/content/afa-admin/integrating-asms-with-splunk.htm?Highlight=splunk