Threat mitigation system and method
A computer-implemented method, computer program product and computing system for: a computer-implemented method is executed on a computing device and includes: rendering a threat mitigation user interface that identifies objects within a computing platform in response to a security event; rendering an inspection window that defines object information concerning a selected object within the threat mitigation user interface; and enabling a third-party to effectuate a specific targeted action that is based, at least in part, upon the object information defined within the inspection window.
1. A computer-implemented method, executed on a computing device, comprising:
rendering a threat mitigation user interface that identifies objects within a computing platform in response to a security event;
gathering one or more of the identified objects in response to the security event, wherein the one or more objects include one or more of a time-based traffic map object, a service splunk object, a service “CB Response” object, an outbound traffic by port graphical object, and a data sources graphical object;
rendering an inspection window of a graphical user interface that defines object information concerning a selected object within the threat mitigation user interface, wherein the inspection window is provided as a slide out inspection window within the graphical user interface; and
enabling a third-party to effectuate a specific targeted action that is based, at least in part, upon the object information defined within the inspection window, wherein enabling the third-part to effectuate a specific targeted action includes:
rendering an action list that defines one or more targeted actions that are based, at least in part, upon the object information defined within the inspection window; and
enabling the third-party to select the specific targeted action from the one or more targeted actions defined within the action list.
2. The computer-implemented method of claim 1 wherein the inspection window is a popup inspection window.
3. The computer-implemented method of claim 1 further comprising:
detecting the security event within the computing platform based upon identified suspect activity.
4. The computer-implemented method of claim 3 wherein detecting the security event within the computing platform based upon identified suspect activity includes:
monitoring a plurality of sources to identify suspect activity within the computing platform.
5. The computer-implemented method of claim 1 further comprising:
defining the objects within the computing platform in response to the security event.
6. The computer-implemented method of claim 5 wherein defining the objects within the computing platform in response to the security event includes:
gathering the objects within the computing platform in response to the security event from a plurality of sources associated with the computing platform.
7. The computer-implemented method of claim 1 further comprising defining the action list including actions that are based upon the object information defined within the inspection window.
8. A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:
rendering a threat mitigation user interface that identifies objects within a computing platform in response to a security event;
gathering one or more of the identified objects in response to the security event, wherein the one or more objects include one or more of a time-based traffic map object, a service splunk object, a service “CB Response” object, an outbound traffic by port graphical object, and a data sources graphical object;
rendering an inspection window of a graphical user interface that defines object information concerning a selected object within the threat mitigation user interface, wherein the inspection window is provided as a slide out inspection window within the graphical user interface; and
enabling a third-party to effectuate a specific targeted action that is based, at least in part, upon the object information defined within the inspection window, wherein enabling the third-part to effectuate a specific targeted action includes:
rendering an action list that defines one or more targeted actions that are based, at least in part, upon the object information defined within the inspection window; and
enabling the third-party to select the specific targeted action from the one or more targeted actions defined within the action list.
9. The computer program product of claim 8 wherein the inspection window is a popup inspection window.
10. The computer program product of claim 8 further comprising:
detecting the security event within the computing platform based upon identified suspect activity.
11. The computer program product of claim 10 wherein detecting the security event within the computing platform based upon identified suspect activity includes:
monitoring a plurality of sources to identify suspect activity within the computing platform.
12. The computer program product of claim 8 further comprising:
defining the objects within the computing platform in response to the security event.
13. The computer program product of claim 12 wherein defining the objects within the computing platform in response to the security event includes:
gathering the objects within the computing platform in response to the security event from a plurality of sources associated with the computing platform.
14. The computer program product of claim 8 further comprising defining the action list including actions that are based upon the object information defined within the inspection window.
15. A computing system including a processor and memory configured to perform operations comprising:
rendering a threat mitigation user interface that identifies objects within a computing platform in response to a security event;
gathering one or more of the identified objects in response to the security event, wherein the one or more objects include one or more of a time-based traffic map object, a service splunk object, a service “CB Response” object, an outbound traffic by port graphical object, and a data sources graphical object;
rendering an inspection window of a graphical user interface that defines object information concerning a selected object within the threat mitigation user interface, wherein the inspection window is provided as a slide out inspection window within the graphical user interface; and
enabling a third-party to effectuate a specific targeted action that is based, at least in part, upon the object information defined within the inspection window, wherein enabling the third-part to effectuate a specific targeted action includes:
rendering an action list that defines one or more targeted actions that are based, at least in part, upon the object information defined within the inspection window; and
enabling the third-party to select the specific targeted action from the one or more targeted actions defined within the action list.
16. The computing system of claim 15 wherein the inspection window is a popup inspection window.
17. The computing system of claim 15 further comprising:
detecting the security event within the computing platform based upon identified suspect activity.
18. The computing system of claim 17 wherein detecting the security event within the computing platform based upon identified suspect activity includes:
monitoring a plurality of sources to identify suspect activity within the computing platform.
19. The computing system of claim 15 further comprising:
defining the objects within the computing platform in response to the security event.
20. The computing system of claim 19 wherein defining the objects within the computing platform in response to the security event includes:
gathering the objects within the computing platform in response to the security event from a plurality of sources associated with the computing platform.
21. The computing system of claim 15 further comprising defining the action list including actions that are based upon the object information defined within the inspection window.