Description

Demisto (now Cortex XSOAR) is an automated incident response and security orchestration platform designed for security teams. It enables users to review and validate playbook runs with human-readable output and machine-readable context, visualize tailored metrics, run security commands without switching consoles, as well as capture incident context from disparate sources. Features include task automation, YAML-based sharing capability, customizable dashboards, product proliferation, and mail listener integration. Modules include security orchestration, incident management, interactive investigation, machine learning (ML), architecture, and indicator repository.