June 2023 Summaries

The Tines Toolkit, launched in May, is a cloud-based feature of the Tines platform that facilitates simple tasks without the need for APIs, such as taking screenshots, conducting WHOIS lookups, and performing reverse IP searches. Users can easily access and utilize seven pre-configured templates by dragging actions from the "Templates" section within their Tines tenant to their storyboard, and then filling in any required information. The toolkit requires the ability to send HTTP requests to its dedicated URL and is subject to rate limiting, with a higher allowance for requests originating from a Tines tenant. Tines plans to expand the toolkit's capabilities based on customer feedback and encourages users to submit ideas for new services.

Tines, a company focused on customer needs, developed a feature called "cases" to enhance collaboration and incident tracking, allowing teams to analyze data and improve automated workflows. The cases feature is designed to integrate seamlessly with existing workflows and can be used alongside or instead of traditional ticketing systems like Jira, offering a streamlined approach to managing incidents. Tines utilizes a simple API payload for case creation, enabling easy adaptation of existing Jira ticket fields and employs Markdown for efficient text formatting and data organization. With a user-friendly interface and robust automation capabilities, Tines aims to optimize operational efficiency, encouraging users to explore further through a blog post by CEO Eoin Hinchy.

Cyber Threat Intelligence (CTI) professionals can enhance their research and analysis by using Tines, a tool designed to automate repetitive tasks and streamline the process of enriching Indicators of Compromise (IoCs). The text provides a detailed guide on creating a browser extension with Tines, using the Chrome browser, to facilitate the enrichment of IPs. It begins with setting up a VirusTotal account and obtaining an API key, followed by creating a credential in Tines and downloading a pre-prepared browser extension. The guide further instructs on modifying a JavaScript file within the extension to include specific tenant details and concludes with steps to load the modified extension into a browser. Once installed, users can highlight IPs, right-click, and send them to the Tines story for enrichment, thus enhancing the efficiency and effectiveness of threat intelligence research.

Many SOAR solutions emphasize case management, an essential feature for analysts overwhelmed by high alert volumes and ticket backlogs. Security teams often face a dilemma between choosing effective automation or effective case management. To address this, a new feature called "cases" has been introduced, offering a collaborative space for managing workflows and incidents based on data from various stories. This feature facilitates incident response, captures and stores actions, analyzes trends, and identifies automation opportunities. Cases provide a collaborative workspace with records of event data, timelines of events, and various formatting options to enhance communication and organization. Tines, a platform already known for reducing ticket backlogs through automation, now enables users to create records of automated responses, identify gaps, and collaborate effectively, aiming to transform incident response and beyond.

Tines has achieved notable milestones with Amazon Web Services (AWS) as part of its participation in the upcoming re:Inforce 2023. These milestones include earning the AWS Security Competency, participating in the launch of Amazon Security Lake, and developing a partner solution with Amazon GuardDuty. The AWS Security Competency acknowledges Tines' deep technical expertise in AWS Cloud Security and its success in delivering security-focused solutions. The launch of Amazon Security Lake, available since May 30, 2023, aims to streamline security investigations by consolidating data into a single lake. In collaboration with AWS, Tines developed a solution that automates responses to Amazon GuardDuty alerts, demonstrating quick user adoption with thousands of executions since its launch in May. Tines' partnership with AWS continues to expand, offering over 30 AWS-focused automation workflows, which help organizations enhance their cloud security strategies. Tines is poised to showcase these advancements at re:Inforce 2023, where attendees can explore their joint solutions with AWS or book demos with the technical team.