Brian J Kafenbaum

US Patent:

20170243008, Aug 24, 2017

Filed:

Feb 18, 2016

Appl. No.:

15/047391

Inventors:

- TEMPE AZ, US
BRIAN KAFENBAUM - Anthem AZ, US
BRANT WHEELER - Cookeville TN, US
AUSTIN MCDANIEL - Boynton Beach FL, US

Assignee:

SWIMLANE LLC - TEMPE AZ

International Classification:

G06F 21/57
G06Q 10/06

Abstract:

A security operations system may receive an alarm in response to a detected threat. The alarm may include characteristics of the threat. The system may then generate a record in response to the alarm and populate a form with the characteristics of the threat. The form may be associated with the record and selected in response to a type of the threat. The system may further generate a workflow including at least one but potentially multiple actions. The system also receives security contextual information in response to a request including the characteristics of the threat or associated indicators of the threat and then updates the form to include the security contextual information. The security operations system can evaluate contextual information and request additional information, as well as leverage workflow to take iterative changes to rulesets and configurations, to provide additional security protection or gamer additional information on a threat.