Splunk Phantom
The end user’s e-mail is analyzed in the Incident Responder-integrated analysis engines. If the results of the analysis are proven to be dangerous, the company’s SOC team will attempt to eliminate the malicious e-mail with solutions such as Antivirus, Firewall, EDR, Proxy, and so on. Manually doing this step takes a long time and causes delays in incident response. Integration with the Incident Responder module provides additional power to manage reported incidents and conduct investigations automatically and more efficiently.
