Background:
As the world’s leading managed cloud company, Rackspace has more than 6,000 employees and an infrastructure that spans four continents. Investigating phishing emails is just one of many issues the security team addresses. Rackspace needed a security orchestration, automation and response platform, and selected Splunk Phantom.
Challenges:
- Needed a security orchestration, automation and response platform to improve security.
Benefits:
- Automating a manual process that required up to 10 different security products and took 90 minutes or more.
- Increasing efficiency, consistency and improving security.
- Freeing the team to focus time on investigations that require human insight.
Business Impact:
- Saving time by automating and orchestrating the management of phishing incidents and other security issues.
- Simplifying workflow across security and other teams.
- Gaining flexibility to address the company’s dynamic network without requiring specialized DevOps skills.
Splunk Products:
- Splunk Enterprise
- Splunk SOAR (Previously Splunk Phantom) Enterprise Edition
