Ticketing/SOAR
Case management
A ticketing solution for threat hunting is a system that enables threat hunters to manage and track their hunts
The solution can help to streamline the threat hunting process, ensure accountability and improve collaboration among team members
When selecting a ticketing solution for threat hunting, it's important to consider the following:
Customization
Integration
Automation
Collaboration
Reporting
Examples
If your organization has an existing case management solution, it can be leveraged to handle documenting or tracking threat hunts
Many Security Orchestration, Automation and Response (SOAR) solutions are potential solutions for not only documenting and tracking threat hunts but also to analyze events or take actions
Here are some popular ticketing solutions for threat hunting:
ServiceNow Security Operations
Jira Service Management
Freshservice
Zendesk
Last updated