Check Point Exposure Management (formerly Cyberint)
Check Point Exposure Management provides intelligence-driven digital risk protection.
Check Point Exposure Management helps you identify emerging threats, verifies your security posture, and responds effectively to reduce their impact.
Visit our site at checkpoint.com
What does this pack do?
Check Point Exposure Management and XSOAR integration is here to simplify and streamline Digital Risk Protection for Cortex XSOAR users, bring enriched threat intelligence from the Check Point Exposure Management Platform into Cortex XSOAR and automatically implement playbooks and incident processes.
- Leverages enriched and contextualized data from the Check Point Exposure Management platform to maximize your security posture within Cortex XSOAR.
- Easily exposes attack tools, phishing sites, fraud incidents, and more.
- Automatically blocks IOCs, resets account credentials, changes access tokens, and more.
- Optimizes your security team’s performance for faster Mean Time to Acknowledge (MTTA) and Mean Time to Remediate (MTTR).
- Tracks the status of tickets with automatic sync updates across systems for instant visibility and comprehensive performance metrics.
Out-of-the-box playbooks
The pack ships with ready-to-use automation playbooks that operationalize Check Point Exposure Management threat intelligence directly into SOC workflows:
- Check Point - IOC Enrichment and Triage - Enriches IP, domain, URL and file-hash indicators with Check Point Exposure Management threat intelligence and applies triage decision logic.
- Check Point - Credential Leak Validation and Response - Validates and responds to leaked employee or customer credentials, with automated or semi-automated remediation.
- Check Point - Vulnerability Exploitation Monitoring - Enriches CVEs with Check Point Exposure Management vulnerability intelligence and prioritizes them based on real-world exploitation.
- Check Point - Phishing Takedown - Automates or semi-automates the takedown of high-confidence phishing websites, including takedown submission and status polling.
Additional useful links
- Link to our blog
