Ticketing/SOAR

Case management

A ticketing solution for threat hunting is a system that enables threat hunters to manage and track their hunts

The solution can help to streamline the threat hunting process, ensure accountability and improve collaboration among team members

When selecting a ticketing solution for threat hunting, it's important to consider the following:

  • Customization

  • Integration

  • Automation

  • Collaboration

  • Reporting

Examples

If your organization has an existing case management solution, it can be leveraged to handle documenting or tracking threat hunts

Many Security Orchestration, Automation and Response (SOAR) solutions are potential solutions for not only documenting and tracking threat hunts but also to analyze events or take actions

Here are some popular ticketing solutions for threat hunting:

  • ServiceNow Security Operations

  • Jira Service Management

  • Freshservice

  • Zendesk

Last updated