This webinar recording provides an in-depth overview of the latest updates and enhancements to Cisco's XDR (Extended Detection and Response) platform. Gain valuable insights into the evolving landscape of XDR, including improvements in control center features, detection coverage mapping, and integrations with third-party vendors. The session emphasizes the importance of staying informed about product changes and how these updates can enhance security operations across various domains.
Key topics covered:
-
XDR Product Enhancements: Discusses recent improvements in the Cisco XDR platform, including updates to the control center feature, which now offers enhanced reporting and dash-boarding capabilities. The session highlights the introduction of the MITRE visibility report and the integration of additional insights from secure endpoint configurations.
-
Data Ingestion and Health Monitoring: Covers the new control center dashboard tile that allows users to monitor data ingestion from various sources, including timestamps and system health checks. Upcoming features aim to provide notifications for data ingestion failures and a more detailed view of the incoming data.
-
Incident Investigation and Response: Reviews enhancements in the incident investigation process, such as the addition of new columns and configurations in the incident list, improved contextual information about incident sources, and updates to action taken data. The session also explores integration efforts to streamline response workflows and enhance endpoint detection capabilities.
