Blog
Supporto
Anomali Marketplace

Entra in contatto con la community CISO di Anomali

Negozio partner preferito Anomali

L'unico marketplace per informazioni sulle minacce, arricchimenti e integrazioni.

Overview
Threat Intelligence Feeds
Threat Analysis Tools
Security System Partners

Integrazioni chiavi in mano con l'infrastruttura di sicurezza esistente

Anomali ThreatStream aggrega l'intelligence sulle minacce in un'unica piattaforma, fornendo un set integrato di strumenti per supportare indagini rapide ed efficienti e fornendo informazioni sulle minacce «operative» nei controlli di sicurezza alla velocità della macchina.

Sei interessato a sfruttare l'intelligence sulle minacce nella tua soluzione di sicurezza? Diventa un Anomali Technology Partner e risolviamo insieme i problemi dei clienti!

iniziare

Integrazioni SIEM

Aggiungete informazioni sulle minacce ad alta fedeltà ai dati degli eventi nel vostro SIEM in modo che gli analisti SOC possano concentrarsi sulle minacce reali anziché sui falsi positivi. Anomali raccoglie e classifica continuamente le informazioni sulle minacce (in base a severità e affidabilità) e fornisce IOC arricchiti e prioritari con contesto e rilevanza delle minacce per il tuo SIEM per il monitoraggio e il rilevamento delle minacce alla sicurezza nell'infrastruttura aziendale.

L'ecosistema delle operazioni di sicurezza di Anomali include integrazioni chiavi in mano con le principali soluzioni SIEM e data lake, tra cui:

Integrazioni SOAR

Gli strumenti SOAR offrono al team SOC la capacità di automatizzare e orchestrare il ciclo di vita della risposta agli incidenti di sicurezza. I prodotti di intelligence e rilevamento delle minacce di Anomali si integrano strettamente con le soluzioni SOAR leader del settore, fornendo i fattori scatenanti per avviare la risposta e la correzione degli incidenti, nonché per aiutare i team di risposta agli incidenti ad arricchire, indagare e dare priorità agli incidenti con informazioni sulle minacce contestualizzate.

I partner integrati di Anomali SOAR includono:

Firewall e integrazioni di sicurezza di rete

I firewall e le soluzioni di sicurezza di rete, spesso considerati la chiave per impedire alle minacce dannose di penetrare nella rete, sono strettamente integrati con la piattaforma Anomali ThreatStream. ThreatStream fornisce automaticamente le informazioni sulle minacce ad alta fedeltà di tua scelta al perimetro di rete e ai prodotti di sicurezza per proteggere attivamente utenti e risorse e ridurre al minimo i falsi positivi.

I partner delle soluzioni di sicurezza di rete Anomali con integrazioni pronte per l'implementazione includono:

Integrazioni per la sicurezza degli endpoint

Concentrati sulle minacce significative combinando l'intelligence sulle minacce in tempo reale con i dati degli eventi nella distribuzione del rilevamento e della risposta degli endpoint, consentendo al team di sicurezza di difendersi in modo proattivo e rispondere più rapidamente. Oltre alla fornitura automatica di indicatori arricchiti e classificati per rischio ai tuoi servizi di protezione, External Lookup integrato offre agli analisti le informazioni necessarie sugli avvisi a portata di mano, indirizzandoli alle pagine dei dettagli sull'intelligence di Anomali ThreatStream. Da qui, agli analisti viene fornito tutto il contesto disponibile e, se un indicatore viene attribuito a un gruppo di attori o a una campagna specifici, ThreatStream fornirà i relativi osservabili e modelli di minaccia di cui è necessario essere consapevoli per contrastare efficacemente gli attacchi.
‍
I partner delle soluzioni di sicurezza degli endpoint di Anomali con integrazioni pronte all'uso includono:

Integrazioni per la gestione dei rischi e delle vulnerabilità

Integra Anomali con la tua piattaforma di gestione dei rischi e delle vulnerabilità per comprendere lo stato degli asset aziendali e il modo in cui gli avversari potrebbero influire sulla tua attività. Le nostre integrazioni possono aiutarti a capire in che modo un avversario potrebbe sfruttare le lacune nella tua sicurezza per accedere alle risorse chiave e a concentrare le azioni correttive prima che si verifichi un evento di violazione. La distribuzione automatizzata e in tempo reale di informazioni critiche e contestualizzate sugli autori delle minacce più rilevanti e sui relativi TTP consente di identificare le lacune di controllo o le configurazioni errate correlate, quindi perfezionare lo stack di sicurezza per ridurre i rischi e aumentare la sicurezza.
‍
La soluzione Anomali per la gestione dei rischi e delle vulnerabilità collabora con integrazioni pronte all'uso, tra cui:

Partner
Bandura
Feed di intelligence sulle minacce
The Bandura platform is a purpose-built solution that, along with out-of-box threat intelligence, integrates with the Anomali Threat Platform to aggregate, automate, and operationalize massive amounts of threat intelligence. The platform blocks known threats and unwanted traffic, enabling organizations to strengthen their network defenses, reduce staff workload, and maximize the value of existing security controls.
Scheda tecnicaSito Web
Broadcom ProxySG
Feed di intelligence sulle minacce
Symantec delivers high-performance on-premises secure web gateway appliances that protect organizations across the web, social media, applications, and mobile networks. Combine with cloud-delivered Web Security Service for a centrally-managed, hybrid secure web solution.
Scheda tecnicaSito Web
Carbon Black
Feed di intelligence sulle minacce
Carbon Black leads a new era of endpoint security by enabling organizations to disrupt advanced attacks, deploy the best prevention strategies for their business, and leverage the expertise of 10,000 professionals from IR firms, MSSPs and enterprises to shift the balance of power back to security teams. Only Carbon Black continuously records and centrally retains all endpoint activity, making it easy to track an attacker’s every action, instantly scope every incident, unravel entire attacks and determine root causes. Carbon Black also offers a range of prevention options so organizations can match their endpoint defense to their business needs. Carbon Black has been named #1 in endpoint protection, incident response, and market share. Forward-thinking companies choose Carbon Black to arm their endpoints, enabling security teams to: Disrupt. Defend. Unite.
Scheda tecnicaSito Web
Check Point Software Technologies Ltd.
Feed di intelligence sulle minacce
Check Point Software Technologies Ltd. is a leading provider of cyber security solutions to governments and corporate enterprises globally. Its solutions protect customers from cyber-attacks with an industry leading catch rate of malware, ransomware and other types of attacks. Check Point offers a multilevel security architecture that defends enterprises’ cloud, network and mobile device held information, plus the most comprehensive and intuitive one point of control security management system. Check Point protects over 100,000 organizations of all sizes.
Scheda tecnicaSito Web
Cisco ASA
Feed di intelligence sulle minacce
Beat sophisticated cyber attacks with a superior security appliance. We offer the industry’s first threat-focused next-generation firewall (NGFW), the ASA 5500-X Series.
Scheda tecnicaSito Web
Cloudera
Feed di intelligence sulle minacce
Cloudera delivers the modern platform for machine learning and advanced analytics built for the cloud. The world’s leading organizations trust Cloudera to help solve their most challenging business problems by efficiently capturing, storing, processing and analyzing vast amounts of data.
Scheda tecnicaSito Web
CrowdStrike
Feed di intelligence sulle minacce
CrowdStrike™ is a leading provider of next-generation endpoint protection, threat intelligence, and services. CrowdStrike Falcon enables customers to prevent damage from targeted attacks, detect and attribute advanced malware and adversary activity in real time, and effortlessly search all endpoints reducing overall incident response time. CrowdStrike customers include some of the largest blue chip companies in the financial services, energy, oil & gas, telecommunications, retail, and technology sectors, along with some of the largest and most sophisticated government agencies worldwide.
Scheda tecnicaSito Web
Elasticsearch
Feed di intelligence sulle minacce
From startups to the global 2000, Elastic powers search solutions for thousands of companies worldwide to find documents, monitor infrastructure, protect against security threats, and more.
Scheda tecnicaSito Web
FireEye
Feed di intelligence sulle minacce
FireEye is the intelligence-led security company. Working as a seamless, scalable extension of customer security operations, FireEye offers a single platform that blends innovative security technologies, nation-state grade threat intelligence, and our world-renowned Mandiant consulting. With this approach, FireEye eliminates the complexity and burden of cyber security for organizations struggling to prepare for, prevent, and respond to cyber attacks.
Scheda tecnicaSito Web
Forcepoint
Feed di intelligence sulle minacce
The Forcepoint Platform delivers comprehensive coverage over the cloud. It’s SaaS protection that keeps users and data safe across your entire enterprise.
Scheda tecnicaSito Web
FortiSOAR
Feed di intelligence sulle minacce
FortiSOAR™ is a holistic and enterprise-built security orchestration and security automation workbench that empowers security operation teams. FortiSOAR™ increases a team’s effectiveness by increasing efficiency, allowing for response in near real-time.
Scheda tecnicaSito Web
IBM Qradar
Feed di intelligence sulle minacce
IBM® QRadar® SIEM consolidates log events and network flow data from thousands of devices, endpoints and applications distributed throughout a network. It normalizes and correlates raw data to identify security offenses, and uses an advanced Sense Analytics engine to baseline normal behavior, detect anomalies, uncover advanced threats, and remove false positives. As an option, this software incorporates IBM X-Force® Threat Intelligence which supplies a list of potentially malicious IP addresses including malware hosts, spam sources and other threats. IBM QRadar SIEM can also correlate system vulnerabilities with event and network data, helping to prioritize security incidents.
Scheda tecnicaSito Web
IBM Resilient
Feed di intelligence sulle minacce
IBM Resilient’s mission is to help organizations thrive in the face of any cyberattack or business crisis. The industry’s leading Incident Response Platform (IRP) empowers security teams to analyze, respond to, and mitigate incidents faster, more intelligently, and more efficiently. The Resilient IRP is the industry’s only complete IR orchestration and automation platform, enabling teams to integrate and align people, processes, and technologies into a single incident response hub. With Resilient, security teams can have best-in-class response capabilities. IBM Resilient has more than 200 global customers, including 50 of the Fortune 500, and hundreds of partners globally.
Scheda tecnicaSito Web
Infoblox
Feed di intelligence sulle minacce
Infoblox delivers Actionable Network Intelligence to enterprise, government, and service provider customers around the world. We are the industry leader in DNS, DHCP, and IP address management, the category known as DDI. We empower thousands of organizations to control and secure their networks from the core—enabling them to increase efficiency and visibility, improve customer service, and meet compliance requirements.
Scheda tecnicaSito Web
LogRhythm
Feed di intelligence sulle minacce
LogRhythm, a leader in Threat Lifecycle Management, empowers organizations around the globe to rapidly detect, respond to and neutralize damaging cyberthreats. The company’s patented award-winning platform unifies next-generation SIEM, log management, network and endpoint monitoring, user entity and behavior analytics (UEBA), security automation and orchestration (SAO) and advanced security analytics. In addition to protecting customers from the risks associated with cyberthreats, LogRhythm provides compliance automation and assurance, and enhanced IT intelligence.
Scheda tecnicaSito Web
LogicHub
Feed di intelligence sulle minacce
The LogicHub SOAR+ platform delivers autonomous detection and response, advanced analytics, and machine learning to automate decision making with extreme accuracy.
Scheda tecnicaSito Web
McAfee ESM
Feed di intelligence sulle minacce
McAfee Enterprise Security Manager is a security information and event management (SIEM) solution that delivers actionable intelligence and integrations to prioritize, investigate, and respond to threats.
Scheda tecnicaSito Web
Micro Focus
Feed di intelligence sulle minacce
Micro Focus is a global software company with 40 years of experience in delivering and supporting enterprise software solutions that help customers innovate faster with lower risk. Our portfolio enables our 20,000 customers to build, operate and secure the applications and IT systems that meet the challenges of change. We are a global software company, committed to enabling customers to both embrace the latest technologies and maximize the value of their IT investments. Everything we do is based on a simple idea: the fastest way to get results from new technology investments is to build on what you have–in essence, bridging the old and the new.
Scheda tecnicaSito Web
Microsoft Azure Sentinel
Feed di intelligence sulle minacce
Microsoft Azure Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution. Azure Sentinel allows Security Operation Center (SOC) analysts to detect actionable threats in their security posture and take actions on them. Azure Sentinel integrates with Anomali to offer first class threat intelligence in the product. You can import threat intelligence from Anomali LIMO servers using the Azure Sentinel TAXII data connector and also from Anomali ThreatStream using the Threat Intelligence Platforms data connector. Once the threat intelligence from Anomali is brought into Azure Sentinel, it can be used for threat analysis, detection, investigation and hunting.
Scheda tecnicaSito Web
Palo Alto Networks
Feed di intelligence sulle minacce
Palo Alto Networks is the next-generation security company maintaining trust in the digital age by helping tens of thousands of organizations worldwide prevent cyber breaches. With our deep cybersecurity expertise, commitment to innovation, and game-changing Next-Generation Security Platform, customers can confidently pursue a digital-first strategy and embark on new technology initiatives, such as cloud and mobility. This kind of thinking and know-how helps customer organizations grow their business and empower employees all while maintaining complete visibility and the control needed to protect their critical control systems and most valued data assets.
Scheda tecnicaSito Web
Qualys
Feed di intelligence sulle minacce
Qualys Cloud Platform gives you a continuous, always-on assessment of your global IT, security, and compliance posture, with 2-second visibility across all your IT assets, wherever they reside. And with automated, built-in threat prioritization, patching and other response capabilities, it’s a complete, end-to-end security solution.
Scheda tecnicaSito Web
RSA NetWitness
Feed di intelligence sulle minacce
RSA® Business-Driven Security™ solutions uniquely link business context with security incidents to help organizations manage risk and protect what matters most. RSA solutions are designed to effectively detect and respond to advanced attacks; manage user identities and access; and reduce business risk, fraud and cybercrime. RSA protects millions of users worldwide and works with more than 90 percent of the Fortune 500.
Scheda tecnicaSito Web
Rapid7
Feed di intelligence sulle minacce
In these rapidly changing times, you shouldn’t have to worry about your security program. Rapid7 is here to help you reduce risk across your entire connected environment so your company can focus on what matters most. Whether you need to easily manage vulnerabilities, monitor for malicious behavior, investigate and shut down attacks, or automate your operations — we have solutions and guidance for you.
Scheda tecnicaSito Web
ServiceNow
Feed di intelligence sulle minacce
Securing your organization from unknown threats means taking a proactive security approach. By working with ServiceNow Security Operations, Anomali Threat Intelligence empowers security analysts with an end-to-end security orchestration, automation, and response engine covering monitoring, visibility, and remediation.
Scheda tecnicaSito Web
Siemplify
Feed di intelligence sulle minacce
From case creation, through investigation to remediation – Siemplify provides the intuitive, cloud-native workbench security operations teams have been craving to effectively respond at scale.
Scheda tecnicaSito Web
Splunk
Feed di intelligence sulle minacce
Splunk Inc. (NASDAQ: SPLK) provides the leading software platform for real-time Operational Intelligence. Splunk® software and cloud services enable organizations to search, monitor, analyze and visualize machine-generated big data coming from websites, applications, servers, networks, sensors and mobile devices. More than 8,400 enterprises, government agencies, universities and service providers in more than 100 countries use Splunk software to deepen business and customer understanding, mitigate cybersecurity risk, prevent fraud, improve service performance and reduce cost. Splunk products include Splunk® Enterprise, Splunk Cloud™, Hunk®, Splunk MINT Express™ and premium Splunk Apps.
Scheda tecnicaSito Web
Sumo Logic
Feed di intelligence sulle minacce
More than 2,100 enterprises around the world rely on Sumo Logic platform to monitor, troubleshoot and secure their applications at cloud-scale. The Sumo Logic platform helps you make data-driven decisions and reduce the time to investigate security and operational issues so you can free up resources for more important activities.
Scheda tecnicaSito Web
Tanium
Feed di intelligence sulle minacce
Tanium gives the world’s largest enterprises and government organizations the unique power to secure, control and manage millions of endpoints across the enterprise within seconds. Serving as the “central nervous system” for enterprises, Tanium empowers security and IT operations teams to ask questions about the state of every endpoint across the enterprise in plain English, retrieve data on their current state and execute change as necessary, all within seconds. With the unprecedented speed, scale and simplicity of Tanium, organizations now have complete and accurate information on the state of endpoints at all times to more effectively protect against modern day threats and realize new levels of cost efficiency in IT operations.
Scheda tecnicaSito Web
Tenable
Feed di intelligence sulle minacce
Tenable delivers unparalleled coverage and comprehensive insight to enable you to detect vulnerabilities, assess risk, and prioritize remediation for every asset, in every environment.
Scheda tecnicaSito Web
Verodin
Feed di intelligence sulle minacce
Verodin, part of FireEye, is a platform that has made it possible for organizations to validate the effectiveness of cyber security controls, thereby protecting their reputation and economic value. The Verodin Security Instrumentation Platform (SIP) proactively identifies gaps in security effectiveness attributable to equipment misconfiguration, changes in the IT environment, evolving attacker tactics, and more. By measuring and testing security environments against both known and newly discovered threats, Verodin SIP identifies risks in security controls before a breach occurs and permits companies to rapidly adapt their defenses to the evolving threat landscape. Verodin SIP does this by instrumenting an IT environment to test the effectiveness of network, endpoint, email and cloud controls and provides quantifiable evidence that investments made in controls are actually delivering the expected business outcomes.
Scheda tecnicaSito Web
Zeek
Feed di intelligence sulle minacce
Zeek is a passive, open-source network traffic analyzer. It is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Zeek supports a wide range of traffic analysis tasks even outside of the security domain, including performance measurements and helping with trouble-shooting.
Scheda tecnicaSito Web
Zscaler
Feed di intelligence sulle minacce
Zscaler services enable customers to move securely to a modern cloud architecture. The Zscaler cloud connects users to applications, regardless of where users connect or where the applications are hosted, while providing comprehensive security and a fast user experience. Zscaler offers two service suites that eliminate the cost and complexity of gateway appliances. Zscaler Internet Access securely connects users to internet and SaaS applications, scanning every byte of traffic to protect against cyber threats and data leakage. Zscaler Private Access provides fast access to internal applications hosted in the data center or public clouds—without the need for a VPN.
Scheda tecnicaSito Web
A man wearing headphones and looking at a computer screen.

Migliora le tue capacità di rilevamento e risposta

Le organizzazioni si affidano ad Anomali per sfruttare la potenza della threat intelligence e fornire efficaci funzionalità di rilevamento e risposta estese (XDR).

Pianifica una demo