Detect - Detection Validation
Detection Validation runs automated, continuous breach and attack simulations against detection rules and security controls. Teams can schedule simulations, identify detection gaps, and remediate them without leaving GreyMatter.
Detect - Activity Feed, Comments and Email Notifications
Detection rules now have an activity feed that records deployments, enable and disable changes, and updates, with comments on each activity, email notifications when rules change, and additional deployment options. The result is more control and visibility within the GreyMatter environment.
Respond - Automated Response Playbooks in Detect
Automated Response Playbooks can now be configured directly within Detect and filtered by status, with all activity tracked on each detection rule's Activity log. Teams see at a glance which automations are enabled and available in their environment.
Direct Source Connections
Source | Supported GreyMatter Capabilities |
|---|---|
Claroty xDome for Healthcare | Detect, Investigate/Hunt, Respond |
