阿罗拉称,先用现代SOAR和统一平台改造SOC架构,才能部署智能体做检测与恢复。
日志、威胁情报和安全产品必须整合在现代SOAR系统之下,才能快速行动。只有这样,才能部署智能体来处理检测和恢复。原文 (en)
Logs, threat intelligence and security products must be tied together under a modern security orchestration, automation and response (SOAR) system so you can move quickly. Only then can you deploy agents to handle detection and recovery.