The freedom to build while being able to be assured that security is conserved

As a SOC Analyst in a small company, our department budget is not enough to have all alerts reviewed by our small team of experts. I use Tines as our SOAR platform to automate routine activities related to triage and investigation of security alerts. We connected our email security gateway, endpoint protection system, and threat intelligence feeds to Tines. Now, instead of me copying and pasting IPs or hashes detected in our security tools into VirusTotal, Tines can collect relevant information about alerts and produce an easy-to-read message in Slack for the rest of the team to investigate and The best thing about Tines is that it provides the needed automation without requiring me to have a degree in computer science or Python programming. As mentioned before, there are not enough resources for me to ask another analyst to write specific python scripts to create our playbook. Tines helps me avoid complex coding and visualize the process as a simple storyboard. I find it particularly helpful when working with webhooks or API’s responses with a lot of data. Instead of trying to parse what I need from a significant amount of unnecessary data, Tines allows me to drag and drop the specific variable I need right into the next step of the automation. It can be an attachment, a phishing link, or details about an email user; I can extract the data I want in one step and use it in the next without additional coding.

The ease to use UI and widgets for managing stories