Open Garden In Action: Threat Exposure Management (Veriti) Video and Q&A

[PhoneBoy]

Q&A below the video.

Is this also considered a Threat Intel Platform?

Not exactly, but it does offer some features of a Threat Intelligence Platform (particularly the distribution of IoCs among security components.

Does the tool have connectors to all the 70+ integration? How are these deployed to ingest all this data?

Using public APIs of the various vendors.

As an MSP, could be Veriti be used with all my accounts (Infinity Portal) or this per tenant or only on premises solution?

While it is not integrated into Infinity Portal yet, we do have customers using this in an MSP capacity and it is set up for that.

A customer said they ingest everything from their infrastructure into Splunk and they don't know what to do with this data lake security wise. How can Veriti help here specifically and what information can be provided?

Threat Exposure Management (Veriti) isn't just looking at the data in Splunk, it's also looking at the configuration of the security tools that generated them. In addition to identifying and correcting misconfigurations, it can ensure all your security tools are preventing the associated threats.

[the_rock]

That was EXCELLENT!