FireEye, the malware protection and threat intelligence solutions provider, has integrated next-generation security information and event management (SIEM) and cloud monitoring capabilities into its Helix security operations platform. The company announced the Helix upgrades at its Cyber Defense Summit in Washington, D.C.Helix helps security teams detect threats, automate threat response and streamline compliance reporting, according to a prepared statement. It encompasses over 150 security integrations and 400 playbooks and enables security teams to create their own playbooks and modify existing playbooks.In addition, Helix provides one dashboard for threat visibility and response capabilities across Amazon Web Services (AWS), Microsoft Azure and other cloud platforms, FireEye stated. It also applies user behavior analytics (UBA) to deliver integrated frontline threat intelligence to help security teams identify and address cyber threats missed by legacy tools and non-malware attacks.Helix can be integrated with over 300 FireEye and non-FireEye security tools, according to the company. It is available with the purchase of any FireEye subscription-based solution and works across all FireEye technologies.
A Closer Look at Helix
Helix is a cloud-hosted security operations platform that empowers security teams to detect security incidents by correlating data from multiple tools, FireEye indicated. By doing so, Helix helps security teams use contextual threat intelligence to make data-driven decisions.Furthermore, Helix offers a variety of security features, including:- Compliance Reporting: Provides dashboards and widgets to help security teams aggregate and evaluate threat data.
- Investigative Workbench: Offers security alert and event indexing, archiving and search capabilities.
- Workflow Management: Allows security teams to establish automated and manual investigation workflows.




