Secureworks Threat Detection, Response Gains Cybersecurity Reporting
Secureworks ($SCWX), a Top 250 MSSP, has integrated search and reporting capabilities into its Threat Detection and Response (TDR) solution, according to a prepared statement. These capabilities empower security administrators to use TDR to find and share security data and insights.
In addition, Secureworks has unveiled TDR log collection, health and retention capabilities that ensure security administrators can retrieve and store raw data from any syslog-based log source in investigations, reporting and enrichment activities, the company said. Secureworks also has announced a TDR custom detection rules extension that enables security administrators to customize software applications according to different security use cases.
TDR is a security analytics application delivered via a cloud platform, Secureworks indicated. It is designed to help security administrators identify, investigate and respond to security incidents.
Security administrators can leverage a variety of TDR capabilities, including:
- Analytics: Uses threat intelligence, machine learning and deep learning algorithms to help security administrators identify and prioritize alerts
- Community-Applied Intelligence: Provides access to security knowledge from across Secureworks’ customer base to help security administrators keep pace with evolving cyber threats
- Investigation & Response: Allows security administrators to analyze emerging threats, threat actors and their motives to uncover suspicious activity that evades other security tools
TDR helps security administrators proactively hunt for known and unknown threats and gain security insights, Secureworks noted. In doing so, TDR can guide future security strategies.
Secureworks Builds Momentum with MSSPs, MDR Providers
Along with its TDR enhancements, Secureworks is exploring ways to foster new partnerships with MSSPs and managed detection and response (MDR) providers.
Secureworks continues to build momentum as an MSSP and MDR cybersecurity provider and works closely with channel partners, CEO Mike Cote said in September 2020. Furthermore, more than 100 channel partners began leveraging Secureworks cybersecurity solutions following the company’s launch of its global partner program in May 2020.