McAfee, the device-to-cloud cybersecurity company, recently unveiled two new state-of-the-art cyber and physical security operations centers (SOC), named the McAfee Security Fusion Centers, located in Plano, Texas and Cork, Ireland.

McAfee Security Fusion Centers are designed to support full visibility and management of risks on a global scale. The purpose of the Fusion Centers is threefold: to protect McAfee, to identify new cybersecurity product needs, and to act as a best practices blueprint for customers and partners. The facilities are available on a monthly schedule for customers who want to visit and understand how to better manage the demanding requirements of their own security operations and to see human-machine teaming in practice.

The McAfee Security Fusion Centers are run by Grant Bourzikas, chief information security officer and vice president of Labs Operations at McAfee. Grant will be in Sydney later this year when he keynotes at MPOWER Cybersecurity Summit, Tuesday 31st October, 2018. 

“The McAfee Security Fusion Center was created as a blueprint that leverages security operations technologies in new and innovative ways, enabling greater collaboration between research teams, integration with endpoint detection and response, and allowing for the future scalability of cloud-based technology,” says Bourzikas. “We call ourselves Customer Zero because we are the first organisation to use McAfee’s new offerings and product updates, and because we share our learnings to help customers implement faster and more smoothly.”

Security operations has never been more essential or challenging for an organisation. Attacks are more sophisticated and attackers continue to become more skillful. At the same time, organisations struggle to find the expert talent required to maintain their detection tools and investigate potential threats. By utilising human-machine teaming and deploying automated and advanced analytics technologies to quickly elevate key insights and context, members of the McAfee Security Fusion Center team tasked with examining cyberthreats can focus their attention on high-value next steps, such as understanding a threat’s impact across the organisation and what’s needed to respond.

McAfee also announced a new security operations architecture, built on a new version of McAfee Enterprise Security Manager (McAfee ESM 11), the addition of McAfee Behavioral Analytics, new enhancements to McAfee Investigator and McAfee Advanced Threat Defense, and new integrations with McAfee Active Response. The entire new solution has been deployed in the McAfee Security Fusion Centers, positioning McAfee as its own Customer Zero and enabling McAfee to showcase a working blueprint for security operations in real-time.

McAfee ESM 11 and McAfee Behavioral Analytics are available to customers today. McAfee Investigator will be available in April, and enhancements to McAfee Advanced Threat Defense and McAfee Active Response will be available in May 2018.

The post McAfee Unveils New Global Security Operations Centers appeared first on Shane the Gamer.

McAfee, the device-to-cloud cybersecurity company, today announced to us at STG an expanded product portfolio that evolves security operations capabilities and allows for rapid response to today’s most advanced cybersecurity threats.

McAfee’s updated Enterprise Security Manager (McAfee ESM 11) leverages a new data architecture optimised for scalability, performance, faster search, and collaboration. This new architecture combined with the newly launched McAfee Behavioral Analytics, and enhanced McAfee Investigator, McAfee Advanced Threat Defense, and McAfee Active Response, will help security operation teams optimise their security infrastructure, leverage automation, improve detection, streamline workflows, and ultimately harness the power of human-machine teaming to improve response time and overall security outcomes.

“With companies struggling to keep up with the current threat landscape, the need for human-machine teaming has never been greater,” said Jason Rolleston, vice president of security analytics, McAfee. “Given the difficulty in finding skilled resources, enterprises need advanced analytics- and machine learning-powered solutions to augment the people they have. By combining the strength and speed of these new solutions with the power of human intellect, security operations teams become faster, smarter, more effective, and more efficient.”

McAfee’s enhanced security information and event management (SIEM) combined with advanced analytics will bring human-machine teaming to the next level by enabling security operations teams to more efficiently collect, enrich and share data. Then, the security operations teams can turn the security events into actionable insights that they can act on to confidently detect and correct sophisticated threats faster.

Today’s announcements also build upon McAfee’s leadership position within security information and event management (SIEM) solutions. Gartner named the company a Leader for the seventh consecutive year in the December 2017 “Magic Quadrant for Security Information and Event Management.”

Benefits from the updates and enhancements to McAfee ESM 11, McAfee Behavioral Analytics, McAfee Investigator and McAfee Active Response include an open and scalable data bus architecture at the heart of McAfee ESM 11 sharing huge volumes of raw, parsed and correlated security events to allow threat hunters to easily search recent events, reliably retain data for compliance and forensics, and enable data-hungry analytics applications.

The new McAfee ESM 11 architecture also allows for flexible horizontal expansion with active-active high availability, allowing organisations to rapidly query billions of events. Additional McAfee ESM appliances or virtual machines can be added at any point to add ingestion, query performance and redundancy. 

New big data security analytics and machine learning technology discover new and unusual high-risk security threats without requiring extensive configuration or knowledge, while McAfee Behavioral Analytics distills billions of security events down to hundreds of anomalies to produce a handful of prioritized threat leads. 

McAfee Behavioral Analytics integrates with the McAfee portfolio, including McAfee ESM and McAfee ePolicy Orchestrator, the Data Exchange Layer, and third-party security information and event management (SIEM) solutions.

Also included is the new McAfee Investigator with an Activity Feed which shares data with open source and third-party tools to streamline workflows and improve collaboration. This expanded investigation guides include logon anomalies and new navigation features to multi-select findings for faster case closure. 

Integration between McAfee Investigator and McAfee Active Response enables analysts to scope the impact of a threat across their endpoints in real-time. Enhanced integration between McAfee Active Response and McAfee Advanced Threat Defense enables investigators to view detailed sandbox reports and indicators of compromise (IOC) including a new threat timeline report that visualizes attack execution steps from a single workspace.

You can also keep Windows safe with powerful new capabilities to detect Powershell exploits and remediate by isolating a host.

McAfee ESM 11 and McAfee Behavioral Analytics are available to customers today. McAfee Investigator will be available in April, and enhancements to McAfee Advanced Threat Defense and McAfee Active Response will be available in May 2018.

The post McAfee Takes Human-Machine Teaming to Next Level appeared first on Shane the Gamer.