Why Splunk SOAR?
Prior to Splunk SOAR, Recorded Future clients would conduct their operations manually. “They would have to go into our platform, pull out the information they were looking for, and make a decision on whether or not to move forward when investigating an alert or triaging things in their environment,” Seth says.
With Splunk SOAR Recorded Future customers can automate those otherwise manual, repetitive security operations tasks. Security alerts that previously took minutes or hours to resolve, now only take seconds with Splunk SOAR’s automation capabilities. As a result, Recorded Future customers have increased their operational efficiency and significantly reduced response time to security events.
Seth says his favorite part of Splunk SOAR is the way his team can structure playbooks. “It's easier for us to work with Splunk SOAR in the field because we have the predefined playbooks that we can get up and running for clients a lot quicker, without taking them through the redesigning process,” he says.