Blogue
soutien
Anomali Marketplace

Connectez-vous à la communauté Anomali CISO

Boutique partenaire préférée d'Anomali

La seule place de marché pour les informations sur les menaces, les enrichissements et les intégrations.

Overview
Threat Intelligence Feeds
Threat Analysis Tools
Security System Partners

Intégrations clé en main à votre infrastructure de sécurité existante

Anomali ThreatStream regroupe les informations sur les menaces sur une seule plateforme, fournissant un ensemble intégré d'outils pour soutenir des enquêtes rapides et efficaces, et fournissant des informations « opérationnelles » sur les menaces dans les contrôles de sécurité à la vitesse de la machine.

Vous souhaitez tirer parti des renseignements sur les menaces dans votre solution de sécurité ? Devenez partenaire technologique d'Anomali et résolvons ensemble les problèmes de nos clients !

commencer

Intégrations SIEM

Ajoutez des informations de haute fidélité sur les menaces aux données d'événements de votre SIEM afin que vos analystes SOC puissent se concentrer sur les menaces réelles plutôt que sur les faux positifs. Anomali collecte et classe en permanence les informations sur les menaces (pour des raisons de gravité et de fiabilité) et fournit des IOC enrichis et hiérarchisés avec le contexte des menaces et la pertinence pour votre SIEM pour la surveillance et la détection des menaces de sécurité dans l'infrastructure de votre entreprise.

L'écosystème des opérations de sécurité d'Anomali comprend des intégrations clé en main avec les principales solutions SIEM et data lake, notamment :

Intégrations SOAR

Les outils SOAR permettent à votre équipe SOC d'automatiser et d'orchestrer le cycle de vie de réponse aux incidents de sécurité. Les produits d'intelligence et de détection des menaces d'Anomali s'intègrent étroitement aux principales solutions SOAR du secteur, fournissant les éléments déclencheurs nécessaires pour lancer la réponse aux incidents et y remédier, ainsi que pour aider les équipes de réponse aux incidents à enrichir, étudier et hiérarchiser les incidents grâce à des informations contextualisées sur les menaces.

Les partenaires intégrés d'Anomali SOAR incluent :

Pare-feu et intégrations de sécurité réseau

Les pare-feux et les solutions de sécurité réseau, souvent considérés comme essentiels pour empêcher les menaces malveillantes de pénétrer votre réseau, sont étroitement intégrés à la plateforme Anomali ThreatStream. ThreatStream fournit automatiquement les informations de haute fidélité sur les menaces de votre choix au périmètre de votre réseau et à vos produits de sécurité afin de protéger activement vos utilisateurs et vos actifs et de minimiser les faux positifs.

Les partenaires de la solution de sécurité réseau Anomali proposant des intégrations prêtes à être déployées incluent :

Intégrations de sécurité des terminaux

Concentrez-vous sur les menaces significatives en combinant des informations sur les menaces en temps réel avec des données sur les événements lors du déploiement de la détection et de la réponse de vos terminaux, permettant à votre équipe de sécurité de se défendre de manière proactive et de réagir plus rapidement. Outre la fourniture automatique d'indicateurs enrichis et classés en fonction des risques à vos services de protection, la fonction de recherche externe intégrée fournit à vos analystes les informations nécessaires sur les alertes à portée de main, en les redirigeant vers les pages détaillées des renseignements d'Anomali ThreatStream. À partir de là, les analystes disposent de tout le contexte disponible. Et si un indicateur est attribué à un groupe d'acteurs ou à une campagne spécifique, ThreatStream fournira des observables et des modèles de menaces connexes que vous devez connaître pour contrecarrer efficacement les attaques.
‍
Les partenaires de la solution de sécurité des terminaux Anomali avec des intégrations prêtes à l'emploi incluent :

Intégrations de gestion des risques et des vulnérabilités

Intégrez Anomali à votre plateforme de gestion des risques et des vulnérabilités pour comprendre l'état de santé des actifs de votre entreprise et la manière dont les adversaires peuvent avoir un impact sur votre activité. Nos intégrations peuvent vous aider à comprendre comment un adversaire pourrait exploiter les failles de votre sécurité pour accéder à des actifs clés, et à cibler vos actions correctives avant qu'une faille ne se produise. La diffusion automatisée et en temps réel de renseignements critiques contextualisés sur les acteurs de la menace les plus pertinents et leurs TTP vous permet d'identifier les lacunes de contrôle ou les erreurs de configuration associées, puis d'affiner votre dispositif de sécurité pour réduire les risques et renforcer l'assurance.
‍
La solution de gestion des risques et des vulnérabilités liés aux anomalies s'associe à des intégrations prêtes à l'emploi, notamment :

PARTENAIRES
Bandura
Flux de renseignements sur les menaces
The Bandura platform is a purpose-built solution that, along with out-of-box threat intelligence, integrates with the Anomali Threat Platform to aggregate, automate, and operationalize massive amounts of threat intelligence. The platform blocks known threats and unwanted traffic, enabling organizations to strengthen their network defenses, reduce staff workload, and maximize the value of existing security controls.
Fiche techniqueSite Web
Broadcom ProxySG
Flux de renseignements sur les menaces
Symantec delivers high-performance on-premises secure web gateway appliances that protect organizations across the web, social media, applications, and mobile networks. Combine with cloud-delivered Web Security Service for a centrally-managed, hybrid secure web solution.
Fiche techniqueSite Web
Carbon Black
Flux de renseignements sur les menaces
Carbon Black leads a new era of endpoint security by enabling organizations to disrupt advanced attacks, deploy the best prevention strategies for their business, and leverage the expertise of 10,000 professionals from IR firms, MSSPs and enterprises to shift the balance of power back to security teams. Only Carbon Black continuously records and centrally retains all endpoint activity, making it easy to track an attacker’s every action, instantly scope every incident, unravel entire attacks and determine root causes. Carbon Black also offers a range of prevention options so organizations can match their endpoint defense to their business needs. Carbon Black has been named #1 in endpoint protection, incident response, and market share. Forward-thinking companies choose Carbon Black to arm their endpoints, enabling security teams to: Disrupt. Defend. Unite.
Fiche techniqueSite Web
Check Point Software Technologies Ltd.
Flux de renseignements sur les menaces
Check Point Software Technologies Ltd. is a leading provider of cyber security solutions to governments and corporate enterprises globally. Its solutions protect customers from cyber-attacks with an industry leading catch rate of malware, ransomware and other types of attacks. Check Point offers a multilevel security architecture that defends enterprises’ cloud, network and mobile device held information, plus the most comprehensive and intuitive one point of control security management system. Check Point protects over 100,000 organizations of all sizes.
Fiche techniqueSite Web
Cisco ASA
Flux de renseignements sur les menaces
Beat sophisticated cyber attacks with a superior security appliance. We offer the industry’s first threat-focused next-generation firewall (NGFW), the ASA 5500-X Series.
Fiche techniqueSite Web
Cloudera
Flux de renseignements sur les menaces
Cloudera delivers the modern platform for machine learning and advanced analytics built for the cloud. The world’s leading organizations trust Cloudera to help solve their most challenging business problems by efficiently capturing, storing, processing and analyzing vast amounts of data.
Fiche techniqueSite Web
CrowdStrike
Flux de renseignements sur les menaces
CrowdStrike™ is a leading provider of next-generation endpoint protection, threat intelligence, and services. CrowdStrike Falcon enables customers to prevent damage from targeted attacks, detect and attribute advanced malware and adversary activity in real time, and effortlessly search all endpoints reducing overall incident response time. CrowdStrike customers include some of the largest blue chip companies in the financial services, energy, oil & gas, telecommunications, retail, and technology sectors, along with some of the largest and most sophisticated government agencies worldwide.
Fiche techniqueSite Web
Elasticsearch
Flux de renseignements sur les menaces
From startups to the global 2000, Elastic powers search solutions for thousands of companies worldwide to find documents, monitor infrastructure, protect against security threats, and more.
Fiche techniqueSite Web
FireEye
Flux de renseignements sur les menaces
FireEye is the intelligence-led security company. Working as a seamless, scalable extension of customer security operations, FireEye offers a single platform that blends innovative security technologies, nation-state grade threat intelligence, and our world-renowned Mandiant consulting. With this approach, FireEye eliminates the complexity and burden of cyber security for organizations struggling to prepare for, prevent, and respond to cyber attacks.
Fiche techniqueSite Web
Forcepoint
Flux de renseignements sur les menaces
The Forcepoint Platform delivers comprehensive coverage over the cloud. It’s SaaS protection that keeps users and data safe across your entire enterprise.
Fiche techniqueSite Web
FortiSOAR
Flux de renseignements sur les menaces
FortiSOAR™ is a holistic and enterprise-built security orchestration and security automation workbench that empowers security operation teams. FortiSOAR™ increases a team’s effectiveness by increasing efficiency, allowing for response in near real-time.
Fiche techniqueSite Web
IBM Qradar
Flux de renseignements sur les menaces
IBM® QRadar® SIEM consolidates log events and network flow data from thousands of devices, endpoints and applications distributed throughout a network. It normalizes and correlates raw data to identify security offenses, and uses an advanced Sense Analytics engine to baseline normal behavior, detect anomalies, uncover advanced threats, and remove false positives. As an option, this software incorporates IBM X-Force® Threat Intelligence which supplies a list of potentially malicious IP addresses including malware hosts, spam sources and other threats. IBM QRadar SIEM can also correlate system vulnerabilities with event and network data, helping to prioritize security incidents.
Fiche techniqueSite Web
IBM Resilient
Flux de renseignements sur les menaces
IBM Resilient’s mission is to help organizations thrive in the face of any cyberattack or business crisis. The industry’s leading Incident Response Platform (IRP) empowers security teams to analyze, respond to, and mitigate incidents faster, more intelligently, and more efficiently. The Resilient IRP is the industry’s only complete IR orchestration and automation platform, enabling teams to integrate and align people, processes, and technologies into a single incident response hub. With Resilient, security teams can have best-in-class response capabilities. IBM Resilient has more than 200 global customers, including 50 of the Fortune 500, and hundreds of partners globally.
Fiche techniqueSite Web
Infoblox
Flux de renseignements sur les menaces
Infoblox delivers Actionable Network Intelligence to enterprise, government, and service provider customers around the world. We are the industry leader in DNS, DHCP, and IP address management, the category known as DDI. We empower thousands of organizations to control and secure their networks from the core—enabling them to increase efficiency and visibility, improve customer service, and meet compliance requirements.
Fiche techniqueSite Web
LogRhythm
Flux de renseignements sur les menaces
LogRhythm, a leader in Threat Lifecycle Management, empowers organizations around the globe to rapidly detect, respond to and neutralize damaging cyberthreats. The company’s patented award-winning platform unifies next-generation SIEM, log management, network and endpoint monitoring, user entity and behavior analytics (UEBA), security automation and orchestration (SAO) and advanced security analytics. In addition to protecting customers from the risks associated with cyberthreats, LogRhythm provides compliance automation and assurance, and enhanced IT intelligence.
Fiche techniqueSite Web
LogicHub
Flux de renseignements sur les menaces
The LogicHub SOAR+ platform delivers autonomous detection and response, advanced analytics, and machine learning to automate decision making with extreme accuracy.
Fiche techniqueSite Web
McAfee ESM
Flux de renseignements sur les menaces
McAfee Enterprise Security Manager is a security information and event management (SIEM) solution that delivers actionable intelligence and integrations to prioritize, investigate, and respond to threats.
Fiche techniqueSite Web
Micro Focus
Flux de renseignements sur les menaces
Micro Focus is a global software company with 40 years of experience in delivering and supporting enterprise software solutions that help customers innovate faster with lower risk. Our portfolio enables our 20,000 customers to build, operate and secure the applications and IT systems that meet the challenges of change. We are a global software company, committed to enabling customers to both embrace the latest technologies and maximize the value of their IT investments. Everything we do is based on a simple idea: the fastest way to get results from new technology investments is to build on what you have–in essence, bridging the old and the new.
Fiche techniqueSite Web
Microsoft Azure Sentinel
Flux de renseignements sur les menaces
Microsoft Azure Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution. Azure Sentinel allows Security Operation Center (SOC) analysts to detect actionable threats in their security posture and take actions on them. Azure Sentinel integrates with Anomali to offer first class threat intelligence in the product. You can import threat intelligence from Anomali LIMO servers using the Azure Sentinel TAXII data connector and also from Anomali ThreatStream using the Threat Intelligence Platforms data connector. Once the threat intelligence from Anomali is brought into Azure Sentinel, it can be used for threat analysis, detection, investigation and hunting.
Fiche techniqueSite Web
Palo Alto Networks
Flux de renseignements sur les menaces
Palo Alto Networks is the next-generation security company maintaining trust in the digital age by helping tens of thousands of organizations worldwide prevent cyber breaches. With our deep cybersecurity expertise, commitment to innovation, and game-changing Next-Generation Security Platform, customers can confidently pursue a digital-first strategy and embark on new technology initiatives, such as cloud and mobility. This kind of thinking and know-how helps customer organizations grow their business and empower employees all while maintaining complete visibility and the control needed to protect their critical control systems and most valued data assets.
Fiche techniqueSite Web
Qualys
Flux de renseignements sur les menaces
Qualys Cloud Platform gives you a continuous, always-on assessment of your global IT, security, and compliance posture, with 2-second visibility across all your IT assets, wherever they reside. And with automated, built-in threat prioritization, patching and other response capabilities, it’s a complete, end-to-end security solution.
Fiche techniqueSite Web
RSA NetWitness
Flux de renseignements sur les menaces
RSA® Business-Driven Security™ solutions uniquely link business context with security incidents to help organizations manage risk and protect what matters most. RSA solutions are designed to effectively detect and respond to advanced attacks; manage user identities and access; and reduce business risk, fraud and cybercrime. RSA protects millions of users worldwide and works with more than 90 percent of the Fortune 500.
Fiche techniqueSite Web
Rapid7
Flux de renseignements sur les menaces
In these rapidly changing times, you shouldn’t have to worry about your security program. Rapid7 is here to help you reduce risk across your entire connected environment so your company can focus on what matters most. Whether you need to easily manage vulnerabilities, monitor for malicious behavior, investigate and shut down attacks, or automate your operations — we have solutions and guidance for you.
Fiche techniqueSite Web
ServiceNow
Flux de renseignements sur les menaces
Securing your organization from unknown threats means taking a proactive security approach. By working with ServiceNow Security Operations, Anomali Threat Intelligence empowers security analysts with an end-to-end security orchestration, automation, and response engine covering monitoring, visibility, and remediation.
Fiche techniqueSite Web
Siemplify
Flux de renseignements sur les menaces
From case creation, through investigation to remediation – Siemplify provides the intuitive, cloud-native workbench security operations teams have been craving to effectively respond at scale.
Fiche techniqueSite Web
Splunk
Flux de renseignements sur les menaces
Splunk Inc. (NASDAQ: SPLK) provides the leading software platform for real-time Operational Intelligence. Splunk® software and cloud services enable organizations to search, monitor, analyze and visualize machine-generated big data coming from websites, applications, servers, networks, sensors and mobile devices. More than 8,400 enterprises, government agencies, universities and service providers in more than 100 countries use Splunk software to deepen business and customer understanding, mitigate cybersecurity risk, prevent fraud, improve service performance and reduce cost. Splunk products include Splunk® Enterprise, Splunk Cloud™, Hunk®, Splunk MINT Express™ and premium Splunk Apps.
Fiche techniqueSite Web
Sumo Logic
Flux de renseignements sur les menaces
More than 2,100 enterprises around the world rely on Sumo Logic platform to monitor, troubleshoot and secure their applications at cloud-scale. The Sumo Logic platform helps you make data-driven decisions and reduce the time to investigate security and operational issues so you can free up resources for more important activities.
Fiche techniqueSite Web
Tanium
Flux de renseignements sur les menaces
Tanium gives the world’s largest enterprises and government organizations the unique power to secure, control and manage millions of endpoints across the enterprise within seconds. Serving as the “central nervous system” for enterprises, Tanium empowers security and IT operations teams to ask questions about the state of every endpoint across the enterprise in plain English, retrieve data on their current state and execute change as necessary, all within seconds. With the unprecedented speed, scale and simplicity of Tanium, organizations now have complete and accurate information on the state of endpoints at all times to more effectively protect against modern day threats and realize new levels of cost efficiency in IT operations.
Fiche techniqueSite Web
Tenable
Flux de renseignements sur les menaces
Tenable delivers unparalleled coverage and comprehensive insight to enable you to detect vulnerabilities, assess risk, and prioritize remediation for every asset, in every environment.
Fiche techniqueSite Web
Verodin
Flux de renseignements sur les menaces
Verodin, part of FireEye, is a platform that has made it possible for organizations to validate the effectiveness of cyber security controls, thereby protecting their reputation and economic value. The Verodin Security Instrumentation Platform (SIP) proactively identifies gaps in security effectiveness attributable to equipment misconfiguration, changes in the IT environment, evolving attacker tactics, and more. By measuring and testing security environments against both known and newly discovered threats, Verodin SIP identifies risks in security controls before a breach occurs and permits companies to rapidly adapt their defenses to the evolving threat landscape. Verodin SIP does this by instrumenting an IT environment to test the effectiveness of network, endpoint, email and cloud controls and provides quantifiable evidence that investments made in controls are actually delivering the expected business outcomes.
Fiche techniqueSite Web
Zeek
Flux de renseignements sur les menaces
Zeek is a passive, open-source network traffic analyzer. It is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Zeek supports a wide range of traffic analysis tasks even outside of the security domain, including performance measurements and helping with trouble-shooting.
Fiche techniqueSite Web
Zscaler
Flux de renseignements sur les menaces
Zscaler services enable customers to move securely to a modern cloud architecture. The Zscaler cloud connects users to applications, regardless of where users connect or where the applications are hosted, while providing comprehensive security and a fast user experience. Zscaler offers two service suites that eliminate the cost and complexity of gateway appliances. Zscaler Internet Access securely connects users to internet and SaaS applications, scanning every byte of traffic to protect against cyber threats and data leakage. Zscaler Private Access provides fast access to internal applications hosted in the data center or public clouds—without the need for a VPN.
Fiche techniqueSite Web
A man wearing headphones and looking at a computer screen.

Améliorez vos capacités de détection et de réponse

Les entreprises font confiance à Anomali pour exploiter la puissance du renseignement sur les menaces afin de fournir des capacités de détection et de réponse étendues (XDR) efficaces.

Planifier une démo