Secureworks

Improved cyber resilience through email intelligence

Integrating Mimecast and Secureworks enables organizations to better safeguard against cyberattacks and obtain visualization and insight into security threats. By integrating Mimecast email security data with Secureworks Taegis XDR, joint customers can leverage the full benefits of their investments while improving their organization’s overall cyber resilience against the most widely used attack vectors. In addition, organizations can more easily track threats that pervade IT environments while gaining contextual and behavioral information for threat hunting, investigation and response.

Solution Overview

1. Emails received by Mimecast are passed through a series of hygiene scanning techniques, to ensure that they are safe before delivery to the recipient.

2. Email intelligence provided by Mimecast is sent to Taegis XDR for normalization.

3. Secureworks Taegis XDR uses the email intelligence to alert analysts and add context to data from other Taegis XDR data sources.

Mimecast + Secureworks Use Cases:

• Threat intelligence

  Understand how your organization has been targeted and what attacks have been blocked for better protection.

  Analyse activity events before and after and attack across the entire attack chain to enhance analyts productivity and remediate vulnerabilities.

  Identify initial attack deployment methodology, characteristics and subsequent access attempst across the security landscape without the need for manual effort or multiple toolsets.

  Increase efficiency and effectiveness by prioritizing the most pressing threats.

• Threat Investigation

  Analyse activity events before and after and attack across the entire attack chain to enhance analysts productivity and remediate vulnerabilities.

• Threat Correlation

  Identify initial attack deployment methodology, characteristics and subsequent access attempts across the security landscape without the need for manual effort or multiple toolsets.

Key Benefits

1. Centralized correlation and detection of threats including MimecastApply intelligence to email events from Secureworks Counter Threat Unit
2. Streamline investigation through prioritization of detections
3. Remediate with automated playbooks and single click actions
4. Simplified log ingestion via easy to setup integrations