Cisco XDR turns one year old. Here is the backstory of how we developed relationships and alliances with \u201ccompetitors\u201d to have the open ecosystem of today.<\/p>\n
\u200b[[{“value”:”<\/p>\n
Cisco XDR<\/a> turns one year old<\/a> this week, and it is a good time to share the backstory of how we developed relationships and alliances with \u201ccompetitors\u201d to have the open ecosystem of today.<\/p>\n The story begins in the Black Hat Network Operations Center,<\/a> which provides a high security, high availability network in one of the most demanding environments in the world \u2013 the Black Hat event. This is accomplished with the help of best of breed solutions providers and seasoned security and engineering teams led by Black Hat\u2019s NOC Team Leads. The Security Operations Center is within the NOC.<\/p>\n Cisco XDR at the Black Hat USA 2023 NOC\/SOC<\/p>\n This is our eighth year supporting Black Hat USA<\/a>. Cisco is the Official Mobile Device Management, Malware Analysis and DNS (Domain Name Service) Provider. We work with other official providers to bring the hardware, software and engineers to build and secure the network, for our joint customer Black Hat: Arista, Corelight, Lumen, NetWitness and Palo Alto Networks.<\/p>\n The NOC Team Leads allow Cisco (and the other NOC partners) to bring in additional software to make our internal work more efficient and have greater visibility; however, Cisco is not the official provider for Extended Detection & Response, Network Detection & Response or Collaboration. The Cisco team brings the Breach Protection Suite, including:<\/p>\n Cisco XDR: Threat Hunting \/ Threat Intelligence Enrichment \/ Executive dashboards \/ Automation with Webex While working side-by-side with the Palo Alto Networks engineers year after year deployed to Singapore, London and Las Vegas, we developed trust and the desire to work closer together and build more integrations between the products in the NOC\/SOC. A reporter with The Register<\/em> toured the Black Hat USA 2023 NOC and wrote an article<\/a> about this close collaboration between partners. The working relationship with Palo Alto Networks opened doors with Check Point and Fortinet, as we publicly demonstrated our commitment to cooperation in the SOC.<\/p>\n The Black Hat experiences expanded into building the RSA Conference SOC<\/a>. During his keynote at RSAC 2022, Cisco Security Executive VP and GM Jeetu Patel stated, \u201cWe all know this is a hypercompetitive industry. But beating competitors is nowhere near as important as stopping the bad actors. Collectively, we can work together to defeat our real adversaries.<\/em>\u201d We implement this challenge everyday with Cisco XDR.<\/p>\n Tour at the RSAC 2024 Security Operations Center<\/p>\n We took our experiences at Black Hat and RSAC SOC to the National Football League SOC for the Super Bowl<\/a> and Draft<\/a>. Protecting these large events required cooperation with companies such as Microsoft and CrowdStrike, now two of the most robust integration partners with Cisco XDR. We took those skills and technology integrations to Paris, actively protecting the Paris 2024 Games<\/a> today.<\/p>\n We engaged other industry leaders, including SentinelOne, Trend Micro, Cybereason, Darktrace and Proofpoint; building relationships and integrations with Cisco XDR.<\/p>\n From proof-of-concept connections at Black Hat, we took these ideas and built them into the XDR product. The most recent additions include Cisco Meraki MX, Cisco Umbrella DNS detections and now Palo Alto Networks firewall.<\/p>\n Recent and upcoming third-party integration additions include:<\/p>\n Detections and Incident Generation Threat Investigation Workflows Jira Cloud, Xmatters, ZenDesk Elastic Asset Insights Automated Ransomware Recovery Cisco Partners can publish their own integrations in the Cisco XDR Integrations \u201cExchange\u201d, with our new Verified Integrations Program. Some of the first integrations brought to XDR by participants in this program are:<\/p>\n Threat Investigation <\/strong> Workflows<\/strong> If you have a product that you want to make Cisco XDR compatible, email our Cisco Security Technical Alliance<\/a> at partnering-csta@cisco.com<\/p>\n While you are at Black Hat USA, plan to visit the Cisco Booth, 7-8 August, where you can speak with one of the engineers from the Black Hat SOC inside the Network Operations Center and check out the Cisco XDR and ThousandEyes dashboards up close.<\/p>\n Cisco XDR Dashboard \u2013 Black Hat USA 2023<\/p>\n You can also attend a scheduled NOC Presentation to learn more about the technology partners who come together to build and protect the Black Hat network:<\/p>\n Wednesday, August 7: Thursday, August 8: Be sure to attend the 10th Annual Black Hat USA Network Operations Center (NOC) Report<\/a>, afternoon of Thursday, August 8, 3:20pm-4:00pm (Oceanside A, Level 2).<\/p>\n The 9th Annual Black Hat USA NOC Report 2023<\/p>\n We are excited for the 2nd year of Cisco XDR innovation, accelerating the evolution of the SOC of the Future<\/a>. We will continue to build upon the lessons learned and relationships developed at Black Hat events globally.<\/p>\n Black Hat is the cybersecurity industry\u2019s most established and in-depth security event series. Founded in 1997, these annual, multi-day events provide attendees with the latest in cybersecurity research, development, and trends. Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more. As the event series where all career levels and academic disciplines convene to collaborate, network, and discuss the cybersecurity topics that matter most to them, attendees can find Black Hat events in the United States, Canada, Europe, Middle East and Africa, and Asia. For more information, please visit www.blackhat.com<\/a>.<\/p>\n We\u2019d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Security on social!<\/em><\/p>\n Cisco Security Social Channels<\/strong><\/p>\n Instagram<\/a><\/strong>Facebook<\/a><\/strong>Twitter<\/a><\/strong>LinkedIn<\/a><\/strong><\/p>\n “}]]\u00a0\u00a0Cisco XDR turns one year old. Here is the backstory of how we developed relationships and alliances with \u201ccompetitors\u201d to have the open ecosystem of today.\u00a0\u00a0Read More<\/a>\u00a0Cisco Blogs\u00a0<\/p>","protected":false},"excerpt":{"rendered":" <\/p>\n Cisco XDR turns one year old. Here is the backstory of how we developed relationships and alliances with \u201ccompetitors\u201d to have the open ecosystem of today.<\/p>\n \u200b[[{“value”:”<\/p>\n Cisco XDR<\/a> turns one year old<\/a> this week, and it is a good time to share the backstory of how we developed relationships and alliances with \u201ccompetitors\u201d to have the open ecosystem of today.<\/p>\n The story begins in the Black Hat Network Operations Center,<\/a> which provides a high security, high availability network in one of the most demanding environments in the world \u2013 the Black Hat event. This is accomplished with the help of best of breed solutions providers and seasoned security and engineering teams led by Black Hat\u2019s NOC Team Leads. The Security Operations Center is within the NOC.<\/p>\n Cisco XDR at the Black Hat USA 2023 NOC\/SOC<\/p>\n This is our eighth year supporting Black Hat USA<\/a>. Cisco is the Official Mobile Device Management, Malware Analysis and DNS (Domain Name Service) Provider. We work with other official providers to bring the hardware, software and engineers to build and secure the network, for our joint customer Black Hat: Arista, Corelight, Lumen, NetWitness and Palo Alto Networks.<\/p>\n The NOC Team Leads allow Cisco (and the other NOC partners) to bring in additional software to make our internal work more efficient and have greater visibility; however, Cisco is not the official provider for Extended Detection & Response, Network Detection & Response or Collaboration. The Cisco team brings the Breach Protection Suite, including:<\/p>\n Cisco XDR: Threat Hunting \/ Threat Intelligence Enrichment \/ Executive dashboards \/ Automation with Webex While working side-by-side with the Palo Alto Networks engineers year after year deployed to Singapore, London and Las Vegas, we developed trust and the desire to work closer together and build more integrations between the products in the NOC\/SOC. A reporter with The Register<\/em> toured the Black Hat USA 2023 NOC and wrote an article<\/a> about this close collaboration between partners. The working relationship with Palo Alto Networks opened doors with Check Point and Fortinet, as we publicly demonstrated our commitment to cooperation in the SOC.<\/p>\n The Black Hat experiences expanded into building the RSA Conference SOC<\/a>. During his keynote at RSAC 2022, Cisco Security Executive VP and GM Jeetu Patel stated, \u201cWe all know this is a hypercompetitive industry. But beating competitors is nowhere near as important as stopping the bad actors. Collectively, we can work together to defeat our real adversaries.<\/em>\u201d We implement this challenge everyday with Cisco XDR.<\/p>\n Tour at the RSAC 2024 Security Operations Center<\/p>\n We took our experiences at Black Hat and RSAC SOC to the National Football League SOC for the Super Bowl<\/a> and Draft<\/a>. Protecting these large events required cooperation with companies such as Microsoft and CrowdStrike, now two of the most robust integration partners with Cisco XDR. We took those skills and technology integrations to Paris, actively protecting the Paris 2024 Games<\/a> today.<\/p>\n We engaged other industry leaders, including SentinelOne, Trend Micro, Cybereason, Darktrace and Proofpoint; building relationships and integrations with Cisco XDR.<\/p>\n From proof-of-concept connections at Black Hat, we took these ideas and built them into the XDR product. The most recent additions include Cisco Meraki MX, Cisco Umbrella DNS detections and now Palo Alto Networks firewall.<\/p>\n Recent and upcoming third-party integration additions include:<\/p>\n Detections and Incident Generation Threat Investigation Workflows Jira Cloud, Xmatters, ZenDesk Elastic Asset Insights Automated Ransomware Recovery Cisco Partners can publish their own integrations in the Cisco XDR Integrations \u201cExchange\u201d, with our new Verified Integrations Program. Some of the first integrations brought to XDR by participants in this program are:<\/p>\n Threat Investigation <\/strong> Workflows<\/strong> If you have a product that you want to make Cisco XDR compatible, email our Cisco Security Technical Alliance<\/a> at partnering-csta@cisco.com<\/p>\n While you are at Black Hat USA, plan to visit the Cisco Booth, 7-8 August, where you can speak with one of the engineers from the Black Hat SOC inside the Network Operations Center and check out the Cisco XDR and ThousandEyes dashboards up close.<\/p>\n Cisco XDR Dashboard \u2013 Black Hat USA 2023<\/p>\n You can also attend a scheduled NOC Presentation to learn more about the technology partners who come together to build and protect the Black Hat network:<\/p>\n Wednesday, August 7: Thursday, August 8: Be sure to attend the 10th Annual Black Hat USA Network Operations Center (NOC) Report<\/a>, afternoon of Thursday, August 8, 3:20pm-4:00pm (Oceanside A, Level 2).<\/p>\n The 9th Annual Black Hat USA NOC Report 2023<\/p>\n We are excited for the 2nd year of Cisco XDR innovation, accelerating the evolution of the SOC of the Future<\/a>. We will continue to build upon the lessons learned and relationships developed at Black Hat events globally.<\/p>\n Black Hat is the cybersecurity industry\u2019s most established and in-depth security event series. Founded in 1997, these annual, multi-day events provide attendees with the latest in cybersecurity research, development, and trends. Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more. As the event series where all career levels and academic disciplines convene to collaborate, network, and discuss the cybersecurity topics that matter most to them, attendees can find Black Hat events in the United States, Canada, Europe, Middle East and Africa, and Asia. For more information, please visit www.blackhat.com<\/a>.<\/p>\n We\u2019d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Security on social!<\/em><\/p>\n Cisco Security Social Channels<\/strong><\/p>\n Instagram<\/a><\/strong>Facebook<\/a><\/strong>Twitter<\/a><\/strong>LinkedIn<\/a><\/strong><\/p>\n
\nCisco XDR Analytics (Formerly Secure Cloud Analytics \/ Stealthwatch Cloud): network traffic visibility and threat detection
\nIntegrations at Black Hat Asia SOC in the NOC, to be implemented at Black Hat USA 2024<\/p>\nIt Started at Black Hat<\/strong><\/h2>\n
New Palo Alto Networks (and other) Integrations<\/strong><\/h2>\n
\nPalo Alto Cortex-enabled Next-Generation Firewall
\nMicrosoft Defender for Office 365
\nProofpoint Threat Protection<\/p>\n
\nPalo Alto Cortex-enabled Next-Generation Firewall
\nCheck Point Quantum
\nMicrosoft Defender for Office 365<\/p>\n
\nPalo Alto Networks Panorama \u2013 Add IP, Domain, or URL to Group or Category
\nThis workflow appears in the pivot menu and allows you to add a URL, IP, or domain name to a group or category in Palo Alto Networks Panorama.<\/p>\n
\nThese workflows allow SOCs\/NOCs to collaborate more effectively using the team collaboration tools they already have<\/p>\n
\nIntegrations with SIEMs and data storage apps allow for long-term retention of incident history for compliance and policy purposes<\/p>\n
\nMicrosoft Azure Cloud<\/p>\n
\nRubrik Security Cloud<\/p>\nNew Integration Opportunities<\/strong><\/h2>\n
\nRed Sift Pulse
\nBastille Networks
\nRadware Cloud WAF Service
\nRadware Cloud DDoS Protection Service
\nSignal Sciences Next-Gen WAF<\/p>\n
\nRadware Cloud DDoS Protection Service
\nRubrik Security Cloud<\/p>\nCheck Out the NOC and SOC Dashboards at Black Hat<\/strong><\/h2>\n
\n10:20 AM \u2013 10:50 AM in Lagoon G, Level 2
\n4:45 PM \u2013 5:35 PM in Business Hall Theater E<\/p>\n
\n10:20 AM \u2013 10:50 AM in Lagoon G, Level 2
\n2:35 PM \u2013 3:25 PM in Business Hall Theater E<\/p>\nAbout Black Hat<\/strong><\/h2>\n
Cisco XDR is an Open Platform<\/strong><\/h2>\n
\nCisco XDR Analytics (Formerly Secure Cloud Analytics \/ Stealthwatch Cloud): network traffic visibility and threat detection
\nIntegrations at Black Hat Asia SOC in the NOC, to be implemented at Black Hat USA 2024<\/p>\nIt Started at Black Hat<\/strong><\/h2>\n
New Palo Alto Networks (and other) Integrations<\/strong><\/h2>\n
\nPalo Alto Cortex-enabled Next-Generation Firewall
\nMicrosoft Defender for Office 365
\nProofpoint Threat Protection<\/p>\n
\nPalo Alto Cortex-enabled Next-Generation Firewall
\nCheck Point Quantum
\nMicrosoft Defender for Office 365<\/p>\n
\nPalo Alto Networks Panorama \u2013 Add IP, Domain, or URL to Group or Category
\nThis workflow appears in the pivot menu and allows you to add a URL, IP, or domain name to a group or category in Palo Alto Networks Panorama.<\/p>\n
\nThese workflows allow SOCs\/NOCs to collaborate more effectively using the team collaboration tools they already have<\/p>\n
\nIntegrations with SIEMs and data storage apps allow for long-term retention of incident history for compliance and policy purposes<\/p>\n
\nMicrosoft Azure Cloud<\/p>\n
\nRubrik Security Cloud<\/p>\nNew Integration Opportunities<\/strong><\/h2>\n
\nRed Sift Pulse
\nBastille Networks
\nRadware Cloud WAF Service
\nRadware Cloud DDoS Protection Service
\nSignal Sciences Next-Gen WAF<\/p>\n
\nRadware Cloud DDoS Protection Service
\nRubrik Security Cloud<\/p>\nCheck Out the NOC and SOC Dashboards at Black Hat<\/strong><\/h2>\n
\n10:20 AM \u2013 10:50 AM in Lagoon G, Level 2
\n4:45 PM \u2013 5:35 PM in Business Hall Theater E<\/p>\n
\n10:20 AM \u2013 10:50 AM in Lagoon G, Level 2
\n2:35 PM \u2013 3:25 PM in Business Hall Theater E<\/p>\nAbout Black Hat<\/strong><\/h2>\n