October 2022 Summaries

The text discusses the challenges faced by cybersecurity teams, particularly focusing on the overwhelming volume of alerts and the complexity of tools, which contribute to alert fatigue and missed critical warnings. Despite organizations investing heavily in security, high-profile breaches still occur, often due to poorly tuned alerts, false positives, incompatible tools, outdated processes, and inadequate training. These issues lead to a stressful environment that can cause burnout and high employee turnover. The text emphasizes the importance of innovative and user-friendly tools to manage alerts effectively, suggesting that the current landscape requires better integration and continuous training to maintain a robust security posture. Part 2 of the series will address strategies for keeping teams focused on threat analysis and investigation.

Tines, in collaboration with Material Security, offers a no-code platform that enables security teams to streamline their phishing detection and response workflows through automation. Recognizing the need for customized approaches due to diverse security challenges, the platform provides prebuilt Stories and approximately 20 pre-configured templates to interact with Material’s API without coding. This allows for efficient handling of repetitive tasks such as phishing triage, where flagged emails trigger automated processes that gather and analyze data, reducing the need for manual intervention. Material’s Phishing Herd Immunity feature enhances protection by using employee-reported threats to safeguard the entire organization, while additional monitoring and API integrations further bolster threat intelligence. By automating these processes, organizations can save time, reduce manual workload, and mitigate cybersecurity fatigue among their teams.

Tines has integrated with the Terraform Cloud Run Tasks ecosystem, allowing DevOps teams to automatically approve and record infrastructure requests from Terraform Cloud. By creating a run task within Terraform Cloud, users can leverage Tines to enhance the workflow, including sending webhook notifications to Tines and validating communication through JSON payloads. The integration enables users to execute run tasks via API, CLI, or the Terraform Cloud UI, with Tines managing notifications and approvals. Tines can also interact with ticketing platforms like Jira to streamline the approval process and provide detailed context, such as cost estimation and configuration outputs, improving the efficiency of Terraform Cloud operations. Users can explore and customize workflows in the Tines Story Library, with the option to start using Tines through its free Community Edition.

In a recent episode of the Future of Security Operations podcast, Thomas interviews Corey Hill, Citrix's Director of Security Operations and Incident Response, who has previously worked at Mandiant and Cisco. Corey, who joined Citrix in 2020, now leads a globally distributed team responsible for Detection Engineering, Threat Intelligence, Threat Monitoring, Security Automation, and Incident Response services. The discussion touches on Corey's career journey, his evolving perspective on security, the lessons learned from building multiple SOC teams, and the importance of automation for team efficiency. Corey also emphasizes Citrix's commitment to employee mental health, the inevitability of burnout and strategies to address it, the need to destigmatize breaches, and the influence of mentors on his career. He offers advice for leading security operations teams and discusses the evolution and future of security operations.

Amidst a global economic slowdown, security teams face the challenge of reducing costs while maintaining robust security measures, as malicious actors exploit vulnerabilities during such times to inflict financial and reputational harm. To navigate these challenges, organizations are encouraged to reevaluate their tools and resources, ensuring they deliver desired results and remain relevant. A tailored security plan that focuses on risk reduction and maximizing return on investment is crucial, as is rallying team members to align on measurable goals and communicate their value to the business. Simplifying processes through automation can enhance efficiency, allowing teams to focus on impactful work, while fostering creativity and upskilling can improve employee engagement and retention. Leaders must maintain visibility and clear communication to motivate their teams and provide opportunities for growth, thereby ensuring the organization's resilience during uncertain times.

Microsoft Teams allows users to send messages to a channel via a webhook, which can be set up by accessing the channel's Connectors, selecting Incoming WebHook, and configuring it with a name and optional image. Once configured, the generated webhook URL can be used in platforms like Tines to send messages, including adaptive cards, to the channel. However, this capability is limited to channel messages and is not available for direct messaging to individual users. The setup process involves creating the webhook, copying the generated URL, and using it in an HTTP Request Action within Tines to automate message sending. Users can also explore Tines' Story Library for additional automation options with Microsoft Teams.

Liam Keenan, Head of Commercial Operations at Tines, is focused on developing strategies to boost revenue and enhance customer satisfaction, involving operations optimization and executing the go-to-market plan. Having lived abroad, he now balances his professional life with personal interests like podcasts, streaming, gym activities, and Muay Thai, while also seeking new volunteering opportunities. Keenan's role is diverse, encompassing strategy, systems, tools, enablement, data analytics, and compensation, with his workdays varying between focused morning work and collaborative evening meetings. He finds satisfaction in planning cycles and advises new Tines employees to engage face-to-face with colleagues to feel energized. He appreciates Tines' no-code automation platform for connecting essential tools, which he believes could have greatly benefited his previous roles.

Tines, a platform used by companies to automate critical security workflows, has introduced a new feature called Change Control, designed to enhance the reliability of its platform. Change Control adds a test environment to a Story, allowing users to experiment with changes before applying them live, thus minimizing the risk of unintended impacts. This feature is particularly beneficial for significant and complex Stories where changes can have substantial business consequences. By providing a mechanism to test and evaluate modifications, Change Control ensures that business-critical processes can be safely updated without increasing the platform's complexity.

Aaron Cooper, the Security Operations Manager at TripActions, brings over 20 years of experience in managing secure network environments across various industries, emphasizing the importance of understanding company culture for successful security teams. In a discussion with Thomas, Cooper shares insights on his career transition from hardware to cloud-first tech companies, highlighting the evolving nature of security challenges and the need for adaptive strategies. He discusses the abandonment of the 'onion model' in favor of innovative approaches like risk reduction tools, and stresses the importance of preventing team burnout. Additionally, Cooper's background in psychology provides him with a unique perspective on the resilience of security analysts and how to effectively support them, while he also explores the evaluation of AI tools in enhancing security operations.

Tines, a company founded in 2018 with a mission to enhance automation for businesses, has recently secured an additional $55 million in funding led by Felicis, with participation from existing investors including Accel and Blossom Capital. This funding will be used to bolster their go-to-market strategies, research and development, and partnership alliances. The company, which now employs over 150 people across multiple continents, aims to help businesses efficiently manage workflows and reduce response times to critical alerts through no-code automation solutions. Co-founders Thomas and the team express gratitude for the trust of their customers and highlight the addition of Tom Killalea, an early angel investor, to their board as an Independent Board Member. Tines continues to focus on expanding its team and product offerings to meet the growing demand for automation.