Brian Miller

The Malware Investigation and Response pack accelerates the investigation process for endpoint malware incidents and alerts by collecting evidence of malicious behaviors, searching telemetry data available through EDRs, and processing malware analysis reports through sandboxes.

XDR and XSOAR automation pack uses XDR’s extended endpoint threat detection and response with the workflow automation and orchestration capabilities of XSOAR. This combination with the recent addition of the XQL engine makes it very useful for SOC teams.