SecOps
Flow Automation Highlights
Receiving Event from Material Security: Mindflow automates the reception of security events from Material Security. This eliminates the need for manual monitoring of security alerts, ensuring that important security events are promptly captured and processed without delay.
Computing Case Details: Mindflow automates the computation of details about case messages in Material Security. This task, which would typically involve manual data extraction and analysis, is streamlined, reducing the potential for human error and expediting the process of gathering necessary details.
Extracting MessageID and Date: Mindflow automates the extraction of MessageID and date from reports. This automation ensures that critical data points are accurately captured and ready for subsequent steps, significantly reducing the time spent on manual data entry and extraction.
Retrieving Message Details: Mindflow automatically retrieves detailed information about messages in Material Security. This replaces the manual effort of searching for and compiling message details, ensuring that all necessary information is available quickly and accurately.
Getting Attachment Data: Mindflow automates the retrieval of attachment data from messages. This ensures that all relevant attachments are identified and prepared for analysis, reducing the risk of missing important files and speeding up the process.
Downloading and Unzipping Attachments: Mindflow automates the download and extraction of attachments from Material Security. This task, which can be time-consuming when done manually, is handled efficiently, ensuring that files are ready for analysis without delay.
Searching File Hash in VirusTotal: Mindflow automates the submission of file hashes to VirusTotal for threat analysis. This ensures that files are quickly and accurately scanned for potential threats, providing timely insights into any security risks associated with the attachments.
Orchestration Toolbox
Material Security: In this use case, Material Security is responsible for detecting and generating events related to email security threats. It provides detailed information about case messages, attachments, and potential risks. Mindflow leverages Material Security to automate the retrieval, computation, and analysis of security-related data, ensuring that threat detection is accurate and timely.
VirusTotal: VirusTotal plays a critical role in analyzing the attachments extracted from emails. Once the attachments are downloaded and unzipped, their file hashes are sent to VirusTotal for comprehensive threat analysis. This automation enables rapid identification of malicious files, ensuring that potential threats are promptly detected and addressed.
