Use cases

Phishing

Automate the handling of phishing incidents and response.

Ransomware

Automated playbooks to circumvent incoming attacks at machine speed.

User life cycle management

Automate users’ on and offboarding. Orchestrate the monitoring of suspicious activities.

Threat Intelligence

Enable continuous updates and data sharing from worldwide intelligence feeds.

Threat Hunting

Gather resources spread across your company to decipher previously unknown threats.

Incident triage

Build automated workflows to depart false positives and duplications from real threats.

Endpoint Protection

Automate and Orchestrate the detection and remediation of incidents on your devices.

Threat Detection

Decipher threats running in your organization by mapping abnormal activities.

Forensic investigation

Alleviate the work of forensics with streamlined resources.

Cloud Security

Maintain constant monitoring of your cloud configuration to reduce risks of misconfiguration.
Integrations

Cybersecurity

Put your cybersecurity stack on steroids

Threat Intelligence

SIEM

Network & Firewalls

EDR

Vulnerability Management

Connect your cybersecurity ecosystem

IT & Business

Break silos in your modern IT stack

Ticketing

Communication

IAM

Cloud

Miscellaneous

Explore the paradigm of fusion

Featured Integrations

We cover your entire environment

Jira

Okta

Splunk

Sentinel One

Slack

CyberReason

Discover our 200+ integrations
ITOps
SecOps
CloudOps
Company
- Partners
- Hiring
- Security
Blog

Use cases

Phishing

Automate the handling of phishing incidents and response.

Ransomware

Automated playbooks to circumvent incoming attacks at machine speed.

User life cycle management

Automate users’ on and offboarding. Orchestrate the monitoring of suspicious activities.

Threat Intelligence

Enable continuous updates and data sharing from worldwide intelligence feeds.

Threat Hunting

Gather resources spread across your company to decipher previously unknown threats.

Incident triage

Build automated workflows to depart false positives and duplications from real threats.

Endpoint Protection

Automate and Orchestrate the detection and remediation of incidents on your devices.

Threat Detection

Decipher threats running in your organization by mapping abnormal activities.

Forensic investigation

Alleviate the work of forensics with streamlined resources.

Cloud Security

Maintain constant monitoring of your cloud configuration to reduce risks of misconfiguration.
Integrations

Cybersecurity

Put your cybersecurity stack on steroids

Threat Intelligence

SIEM

Network & Firewalls

EDR

Vulnerability Management

Connect your cybersecurity ecosystem

IT & Business

Break silos in your modern IT stack

Ticketing

Communication

IAM

Cloud

Miscellaneous

Explore the paradigm of fusion

Featured Integrations

We cover your entire environment

Jira

Okta

Splunk

Sentinel One

Slack

CyberReason

Discover our 200+ integrations
ITOps
SecOps
CloudOps
Company
- Partners
- Hiring
- Security
Blog

AWS Config

Vendor

Overview

AWS Config was integrated by Mindflow to enable users to automate their incident management and better protect their information system.

AWS Config Overview

AWS Config is a configuration service available as part of the AWS stack. It enables you to assess, audit, and evaluate the configurations of your AWS resources.

To that end, AWS Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. You can review changes in configurations and relationships between AWS resources, dive into detailed resource configuration histories, and determine your overall compliance with the configurations specified in your internal guidelines.

This enables you to simplify compliance auditing, security analysis, change management, and operational troubleshooting.

AWS Config is your primary tool to perform configuration audits and compliance verification of your AWS and third-party resources. Integrated into Mindflow, you can use AWS Config’s API to view and monitor the resource inventory and configuration history of your AWS resources. And also create rules or conformance packs to evaluate these third-party resources against best practices, internal policies, and regulatory policies.

Benefits

Continuous monitoring

AWS Config continuously monitors and records configuration changes of your AWS resources and inventories, your AWS resources, the configurations of your AWS resources, and software configurations within EC2 instances at any time. If changes from a previous state are detected, an Amazon Simple Notification Service (SNS) notification can be delivered for you to review and take action.

Continuous assessment

AWS Config allows you to define provisioning rules and configure AWS resources. These rules can be provisioned independently or packther with compliance remediation actions inside a pack that can be deployed across your entire organization. Resource configurations or configuration changes that deviate from your rules automatically trigger Amazon Simple Notification Service (SNS) notifications and AWS CloudWatch events so that you can be alerted continuously. You can also use the visual dashboard to check your overall compliance status and spot non-compliant resources.

Change management

Config provides information to assess how a change to a resource configuration would affect your other resources, which minimizes the impact of change-related incidents. You can track the relationships among resources and review resource dependencies before making changes. Once a change occurs, you can quickly review the history of the resource’s configuration and determine what the resource’s configuration looked like at any point in the past.

Operational troubleshooting

Capture a comprehensive history of your AWS resource configuration changes to simplify troubleshooting your operational issues. Config helps you identify the root cause of operational issues through its integration with AWS CloudTrail. You can obtain the details of the event API call invoked the change from the CloudTrail logs.

Enterprise-wide compliance monitoring

With multi-account, multi-region data aggregation in AWS Config, you can view compliance status across your enterprise and identify non-compliant accounts. You can view this data from the Config console in a central account, removing the need to retrieve this information individually from each account and each region.