Large Enterprise Achieved Centralized Threat Intelligence Management With Dataminr

The Challenge

A large technology client was looking for a centralized repository of contextualized threat intelligence, from which employees and machines could access a unified view to derive associations, prioritize threats, and collaborate on observations.

The solution needed to collect, normalize, and disseminate data to both the security team and their existing security tools. The company also needed a way to manage and analyze collected threat data to characterize and prioritize it into actionable intelligence that could be disseminated to threat hunting, incident response, and security operations workflows.

The Solution

Dataminr automated the aggregation of internal and external threat intelligence in a single location, freeing the team from manual data collection so they could focus on analysis and response.

Upon aggregation, in-platform analytics provided the client with context and relevance around threat intelligence to drive action. These actions could be performed automatically or manually, depending on operational requirements.

Dataminr also enabled the company to integrate with existing security tools and customize workflows to optimize SOC processes. The result was a centralized system of record for threat intelligence operations, workflows, and collaboration.

The Outcome

Custom dashboards enabled the company to gain greater insight and situational awareness across threat intelligence and security operations.

The platform also provided the ability to visualize global trends and operational data, helping demonstrate the impact of security efforts and improving the organization’s understanding of its threat exposure.

The company can now automatically monitor security operations and intelligence in a way that is actionable and meaningful for its teams. Analysts can view, edit, create, and share custom dashboards to track metrics that inform critical security decisions and operational priorities.