Cisco Extended Detection and Response (XDR) leverages telemetry from Cisco Secure Endpoint, Secure Email, Secure Network Analytics, and other sources to correlate threat detections with contextual data, such as asset value and business impact. This allows Cisco XDR to prioritize threats not only by the risk of the detection but also by the importance of the affected asset—essentially assessing the risk to business. This dynamic and context-aware prioritization method enables security teams to address the most impactful threats first.
[Reference: Designing and Implementing Secure Cloud Access for Users and Endpoints (SCAZT), Section 6: Threat Response, Pages 108–111.]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit