ASGARD Analysis Cockpit

Key Facts

• Baselining Section: The Baselining Section contains all IOC matches that are not part of existing baseline – i.e: logs that need to be looked at. Powerful visualisation, filtering and integrated tools like auto grouping help you analyse and categorize your matches and set a new baseline. With “Auto Cases” you can set your baseline with just one click – storing all matches in meaningful groups.
• Integrated Case Management: The integrated case management provides an easy to use interface that lets multiple analysts collaborate on the same set of IOC matches. It is highly configurable and supports customizable workflows for multiple analyst groups. The built in two-level analyst model can easily be scaled up to support a multi-level follow the sun SOC.
• Rich Reporting Section: The reporting section features multiple built-in reports on IOC matches and case management activity. They provide statistics on all activities and events within the cockpit, help identify lateral movement and hidden threats. Furthermore they help you improve your organisation by providing KPIs for your implemented workflow. Custom reports can be defined and scheduled.