The integration between the two solutions allows customers to have detailed and actionable alerts to stay ahead of threats
Cohesity, the leader in next-generation data management, today announced that it has joined forces with Palo Alto Networks to integrate its next-generation data management platform, Cohesity Helios, with the Security Orchestration, Automation and Response (SOAR) platform, CortexTM XSOAR at Palo Alto Networks, to improve ransomware detection and data recovery.
A key factor in countering cyber attacks such as ransomware is how quickly the attack can be recognized and recovery steps initiated. This integration allows you to receive automatic and detailed alerts when the Helios platform, equipped with Artificial Intelligence, detects anomalies in the backup data that could indicate an ongoing cyber attack. Once the alert is received from Cohesity, Cortex XSOAR launches an automatic playbook to prioritize the potential cyber attack in progress and mitigate its impact. Integrating a next-generation data management platform with Security Orchestration, Automation and Response (SOAR) functionality can help dramatically accelerate threat detection and response and reduce your organization's risk exposure.
“Any delay in ransomware response and recovery can result in extended downtime, data loss and business interruption,” he explained Brian Spanswick, CISO of Cohesity. “This integration can help more effectively connect data management and security processes, which is critical to staying one step ahead of repeated ransomware attacks and improving an organization’s cyber resilience.”
“Integrating Cortex Matt Chase, Director Cortex Alliances di Palo Alto Networks. “Cohesity's platform, based on Artificial Intelligence, provides detailed alerts based on anomalies found in the data. The granular quality of these alerts helps Cortex XSOAR security analysts more quickly and accurately determine the scope and severity of the incident, helping customers maintain business continuity in the event of an attack.”
Detailed, timely alerts can help security analysts quickly determine how best to respond to attacks and can also help relieve pressure and avoid analyst burnout. According to a study by Forrester Consulting, “The 2020 State of Security Operations”, security analysts find themselves having to counteract enormous attacks with often limited forces. Only 47% of respondents believe their organization can handle most or all of the security alerts received in a single day. The remaining 53% admitted to experiencing various difficulties. Specifically:
- 20% of alerts are reviewed or managed manually by an analyst;
- almost a third of all alerts are false positives;
- 28% of alerts are never reviewed by analysts, simply because the volume of alerts is too high to keep up with.
The integration between Cohesity Helios and Palo Alto Networks' Cortex XSOAR is designed to address these challenges and help reduce them.
Cohesity offers functionality anti-ransomware complete to help protect your backup data from cybercriminals. Cohesity's architecture helps ensure that backup data is immutable and cannot be accidentally or maliciously overwritten. Its software, based on AI-based insights, constantly monitors any anomalies in the organization's data. If the worst happens and an attack occurs, Cohesity helps locate and restore a clean copy of your data to reduce downtime, minimize losses and ensure business continuity.