We use cookies to improve your experience. Do you accept?

Draw Advanced Contextual Intelligence With Cyware’s New Incident Visualizer

Draw Advanced Contextual Intelligence With Cyware’s New Incident Visualizer - Featured Image

Cyware Fusion and Threat Response (CFTR) • Dec 24, 2021

With the threat landscape becoming complex, it is imperative for security teams to be able to establish hidden patterns between seemingly disconnected threats and incidents. We understand the significance of finding latent patterns and gaining more context on an incident, therefore in our latest Cyware Fusion and Threat Response (CFTR) v2.12, we have enabled security analysts to visualize the connections between an incident and the related components and indicators. In this version, we offer Incident Visualizer that allows CFTR users to perform root cause analysis of an incident.

What are the Benefits?

With the new Incident Visualizer feature, CFTR users can now:

  • add components and indicators

  • expand associations

  • group/ungroup the components and indicators as per their types

  • change the visualization layout

  • export the visualization layout in different formats.

  • view Connect the Dots details for each component and indicator

  • perform node analysis

All About the New Feature

The feature that was known as Network Diagram in the previous versions of CFTR has now been renamed as Incident Visualizer. Previously, the Network Diagram feature would graphically represent the Connect the Dots components and indicators but now the Incident Visualizer in CFTR 2.12 has been significantly updated with improved visualization capabilities and several other features.

Incident Visualizer is a graphical representation of the components and indicators that are added to the Connect the Dots and Indicators sections of CFTR v2.12 with many more advanced features to support security analysts’ detailed investigation. The Incident Visualizer helps security analysts visualize all the connections related to an incident, thereby enabling them to make faster and better decisions during an incident response process.

  • Add Components and Indicators : In the Incident Visualizer tab, users can add components and indicators. Any component or indicator added to the Incident Visualizer is also added to the Connect the Dots or Indicators tabs.

  • Group/Ungroup the Connections : Based on their types, any component and indicator can be grouped or ungrouped.

  • Expand Associations : Users can expand associations to further view the individual connection details.

  • Change Visualization Layout : From the two available layouts—Organic and Hierarchy—users can view and select any layout they want.

  • Export Visualization Layout : Users can export the visualization layout in PNG, JPEG, and SVG formats.

  • View Connect the Dots Details : In the Incident Visualizer tab, CFTR users can view Connect the Dots details for each component and indicator.

  • Perform Node Analysis : It displays the summary and breakdown of all the connected components and indicators. Users can show or hide the nodes and groups.

The Bottom Line

In a nutshell, the Incident Visualizer allows security analysts to perform better, simplified, and granular analysis of an incident. This new feature will let security analysts connect the dots between different incidents and establish hidden threat patterns, placing them a step ahead in investigating an incident.

To learn more about the Incident Visualizer in CFTR v2.12, request a demo now!

Related Blogs

Creating Incident Workflows at Scale is Now Easy with Cyware - Featured Image

Creating Incident Workflows at Scale is Now Easy with Cyware

[MSSPs](https://cyware.com/blog/cywares-new-multi-tenancy-dashboard-enables-mssps-to-gain-threat-visibility-across-customer-environments-aef0) spend a lot of ti

Cyware Fusion and Threat Response (CFTR)Import workflowsExport workflowsCFTR tenants
Visualize and Map Global Security Incidents in Real Time - Featured Image

Visualize and Map Global Security Incidents in Real Time

Geographical awareness plays an important role in the planning and execution of an effective incident response, helping incident responders understand the locat

Cyware Fusion and Threat Response (CFTR)Geo-mapping
Don’t Miss Any Critical Task in Incident Response! Auto-Create Actions Now. - Featured Image

Don’t Miss Any Critical Task in Incident Response! Auto-Create Actions Now.

When an incident occurs, security teams create and define actions manually, which increases their [mean time to respond (MTTR)](https://cyware.com/educational-g

Cyware Fusion and Threat Response (CFTR)CFTRUse CaseAction library
Information Sharing for Incident Response Teams is Now Easy with Cyware’s Slack Integration - Featured Image

Information Sharing for Incident Response Teams is Now Easy with Cyware’s Slack Integration

With more security teams working remotely than ever before, team collaboration and communication often become patchy. In our latest release, we have integ

Slack IntegrationCyware Fusion and Threat Response (CFTR)CFTRUse Case
Connect the Dots with Cyware For a Faster Threat Investigation Process - Featured Image

Connect the Dots with Cyware For a Faster Threat Investigation Process

Threat investigation requires unearthing of complex hidden patterns, more so importantly in present times when threat actors have become highly advanced and are

Cyware Fusion and Threat Response (CFTR)Threat InvestigationUse Caseconnect the dots
Manage Dynamic Workflows with Cyware’s Enhanced Incident Module - Featured Image

Manage Dynamic Workflows with Cyware’s Enhanced Incident Module

For different incidents, organizations often follow the same workflows. The different processes involved in an incident response lifecycle require different fra

Cyware Fusion and Threat Response (CFTR)
Cyware’s Approach to Handling Apache Log4j2 Vulnerability - Featured Image

Cyware’s Approach to Handling Apache Log4j2 Vulnerability

Recently, a critical vulnerability has been found in the popular Java-based logging package [Apache Log4j2](https://logging.apache.org/log4j/2.x/). This vulnera

Cyware Fusion and Threat Response (CFTR)Cyware Threat Intelligence eXchangeCyware Situational Awareness Platform (CSAP)log4j2
Discover Hidden Threat Patterns With Cyware’s "Related Incidents" Feature - Featured Image

Discover Hidden Threat Patterns With Cyware’s "Related Incidents" Feature

[Cyware Fusion and Threat Response (CFTR)](https://cyware.com/cyware-fusion-and-threat-response-cftr) continues to set new benchmarks in facilitating a collabor

Cyware Fusion and Threat Response (CFTR)
Cyware Enables Granular Access Control of SOAR Automation Playbooks - Featured Image

Cyware Enables Granular Access Control of SOAR Automation Playbooks

The [Cyware Fusion and Threat Response](https://cyware.com/cyware-fusion-and-threat-response-cftr) (CFTR) platform, in harmony with the [Cyware Security Orchest

Cyware Fusion and Threat Response (CFTR)Cyware Security Orchestration Layer (CSOL)
Shape the Visual Identity of Your SecOps with Cyware's New Threat Response Dashboard - Featured Image

Shape the Visual Identity of Your SecOps with Cyware's New Threat Response Dashboard

The [Cyware Fusion and Threat Response](https://cyware.com/cyware-fusion-and-threat-response-cftr) (CFTR) serves as the home of an organization’s integrated sec

Cyware Fusion and Threat Response (CFTR)
Cyware's SOAR Response Workflow for SUNBURST Attack - Featured Image

Cyware's SOAR Response Workflow for SUNBURST Attack

Over the last several days, the malware tracked by several names including Solorigate and SUNBURST is being used in a widespread campaign termed UNC2452. The ca

Cyware Fusion and Threat Response (CFTR)Cyware Situational Awareness Platform (CSAP)Cyware Threat Intelligence Exchange (CTIX)Cyware Security Orchestration Layer (CSOL)