Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

We have developed a structured approach to enhance incident response (IR) skills through targeted training for responders, particularly in specialized fields like healthcare. Scenarios are derived from both VerisDB and a curated list of Flexible IR incidents, allowing managers to assess their team's current capabilities and devise actionable plans for improvement. By utilizing the Mitre Att&ck Matrix, we can pinpoint specific areas that require further practice. Our runbooks are continually refined through the integration of Symbolic AI, ensuring they remain relevant and effective. Designed to be straightforward, our baseline runbooks facilitate incident management and can be tailored to fit individual environments and the needs of security analysts. Moreover, we conduct expert audits of these runbooks to enhance their quality. This process also aids in mentoring less experienced team members in the realms of threat hunting and incident response. We further simulate adversarial scenarios to provide practical experience, while also emphasizing the importance of ongoing skill development for analysts. Our strategy aligns with the critical 1-10-60 rule for incident response, incorporating a skill matrix and point system to foster continuous motivation and structured learning. Additionally, the system features basic gamification elements, such as card-based games, to make the learning process more engaging and enjoyable. Ultimately, this comprehensive approach not only strengthens individual capabilities but also enhances the overall effectiveness of the incident response team.

Description

LogicHub stands out as the sole platform designed to automate processes such as threat hunting, alert triage, and incident response. This innovative platform uniquely combines automation with sophisticated correlation techniques and machine learning capabilities. Its distinctive "whitebox" methodology offers a Feedback Loop that allows analysts to fine-tune and enhance the system effectively. By utilizing machine learning, advanced data science, and deep correlation, it assigns a threat ranking to each Indicator of Compromise (IOC), alert, or event. Analysts receive a comprehensive explanation of the scoring logic alongside each score, enabling them to swiftly review and confirm results. Consequently, the platform is able to eliminate 95% of false positives reliably. In addition, it continuously identifies new and previously unrecognized threats in real-time, which significantly lowers the Mean Time to Detect (MTTD). LogicHub also seamlessly integrates with top-tier security and infrastructure solutions, fostering a comprehensive ecosystem for automated threat detection. This integration not only enhances its functionality but also streamlines the entire security workflow.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Carbon Black EDR No 
Censys No 
IBM Security Randori Recon No 
Joe Sandbox No 
LOGIQ No 
VMRay No 
urlscan.io No 

Integrations

Carbon Black EDR Yes 
Censys Yes 
IBM Security Randori Recon Yes 
Joe Sandbox Yes 
LOGIQ Yes 
VMRay Yes 
urlscan.io Yes 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Flexible IR

Founded

2017

Country

Singapore

Website

flexibleir.com/cyber-security-incident-response-training-skills

Vendor Details

Company Name

LogicHub

Founded

2017

Country

United States

Website

www.logichub.com

Product Features

Security Awareness Training

Analytics / Reporting No 
Certification Training No 
Custom Test Building No 
Gamification No 
Industry Benchmarking No 
Non-Email Based Testing No 
Online Courses No 
Phishing Simulation No 
Pre-Assessments No 
Prebuilt Training Library No 

Technical Skills Development

Analytics No 
Career Coaching No 
Discussions No 
Exercises and Projects No 
Offline Usage No 
Quizzes & Assessments No 
Videos No 

Product Features

Cybersecurity

AI / Machine Learning No 
Behavioral Analytics No 
Endpoint Management No 
IOC Verification No 
Incident Management Yes 
Tokenization No 
Vulnerability Scanning Yes 
Whitelisting / Blacklisting No 

Incident Management

Audit Trail No 
Corrective Actions (CAPA) Yes 
Disaster Recovery No 
IT Incident Management No 
Incident Reporting Yes 
OSHA Compliance No 
Root-Cause Diagnosis No 
Safety Management No 
Task Management No 
Ticket Management No 

Incident Response

Attack Behavior Analytics No 
Automated Remediation No 
Compliance Reporting No 
Forensic Data Retention No 
Incident Alerting No 
Incident Database No 
Incident Logs No 
Incident Reporting No 
Privacy Breach Reporting No 
SIEM Data Ingestion / Correlation No 
SLA Tracking / Management No 
Security Orchestration No 
Threat Intelligence No 
Timeline Analysis No 
Workflow Automation No 
Workflow Management No 

IT Security

Anti Spam No 
Anti Virus No 
Email Attachment Protection No 
Event Tracking No 
IP Protection No 
Internet Usage Monitoring No 
Intrusion Detection System Yes 
Spyware Removal No 
Two-Factor Authentication No 
Vulnerability Scanning Yes 
Web Threat Management Yes 
Web Traffic Reporting No 

Vulnerability Management

Asset Discovery No 
Asset Tagging No 
Network Scanning Yes 
Patch Management No 
Policy Management No 
Prioritization No 
Risk Management No 
Vulnerability Assessment Yes 
Web Scanning Yes 

Alternatives

HCL iAutomate Reviews

HCL iAutomate

HCLSoftware
ICEFLO Reviews

ICEFLO

Agenor Technology
D3 Smart SOAR Reviews

D3 Smart SOAR

D3 Security