IBM Resilient
The Incident Responder integrated analysis engines examine the reported incidents. If the investigation results show that the malicious e-mail is dangerous, the company’s SOC team will use Anti-virus, Firewall, EDR, Proxy, and other tools to fight it. This process takes a long time to do manually, which delays incident response. Integration with the Incident Responder module provides additional power to manage reported emails and conduct investigations automatically and more efficiently.