Member Article

Mandiant and SentinelOne integrate, enriching XDR with threat intelligence

SentinelOne, an autonomous cybersecurity platform company, has announced an integration with Mandiant to improve threat detection, triage, hunting, and response processes. SentinelOne’s Singularity XDR platform coupled with Mandiant’s threat intelligence and incident response expertise enables organisations to face the increasing threats of today’s cyber landscape with machine speed technology and services.

As threat actors continually deploy new malware strains and attack techniques, it becomes increasingly difficult for even the most experienced IT and security professionals to run cybersecurity programmes. Many organisations are now turning to Extended Detection and Response (XDR) platforms that stream data from multiple security as well as IT tools into a new kind of cybersecurity data platform, where the data is correlated and actioned, providing a more comprehensive view of an organisation’s security posture. The SentinelOne-Mandiant integration enriches Singularity XDR, adding Mandiant’s market-renowned threat intelligence, resulting in a comprehensive solution for detecting, investigating, and responding to incidents, reducing the costs of incident response and improving security postures.

“Our technology delivery of open XDR gives customers the flexibility and choice they deserve when building an XDR strategy - and our business model supports, instead of competes, with our partners,” said Raj Rajamani, Chief Product Officer, SentinelOne. “Harnessing the synergies between Singularity Storyline and Mandiant’s Threat Intelligence delivers even faster triage, root-cause analysis and actionability to every platform alert. With SentinelOne identifying threats and Mandiant providing the context and intel necessary for quick triage and remediation, organisations are equipped to defend themselves against the evolving threat landscape.”

Through the joint solution, suspicious activity and alerts are automatically enriched with threat intelligence from Mandiant, including malicious or benign verdicts, risk scores, threat actor profiles, indicators (IOCs), and links to deeper intelligence within the Mandiant Threat Advantage platform. Analysts can access at-a-glance context from Mandiant saving valuable time during incident triage. Key benefits of the SentinelOne-Mandiant integration include:

• Automated incident triage: SentinelOne incidents are automatically enriched with context and intelligence from Mandiant Threat Intelligence
• Streamlined threat hunting: Query and pivot on IOCs from emerging threats within SentinelOne Singularity
• **Accelerated detection and response: ** Autonomously discover and remediate threats with Indicators of Compromise from Mandiant
• No-code simplicity: Combine best-of-breed solutions with no complex coding or configuration*

The integration is currently in early access and will become generally available in Q4 2022 via SentinelOne’s Singularity Marketplace.

This was posted in Bdaily's Members' News section by P Adams .