πŸ”΄

Security Hub

Cyber Security Β· Compliance Β· Governance β€” SOC Β· XDR Β· ICC Β· GRC Β· Vulnerabilities Β· SecOps
πŸ“š Knowledge Base πŸ—„ CMDB / Assets
πŸ›‘ SecOps capability avanzate NEW
⚑
NEW
SecOps Executive Dashboard Β· CISO view cross-domain
Vista executive CISO con drill-down ai 4 Director: Security Posture Β· Compliance Posture Β· Risk Exposure Β· Top IR Β· Vuln Top Risk Β· MITRE coverage Β· Framework score Β· Threat Intel Β· Emerging risks.
CISO viewDrill-downCross-domainAggregato
βš™
RUNTIME
SecOps Runtime Β· Risk Scoring Β· Approvals Β· Rollback
Configurazione runtime SecOps: scoring algorithm tuning Β· approval queue per azioni SOAR critiche Β· rollback one-click delle azioni eseguite.
Risk scoreApprovalsRollback
πŸ€–
AGENTIC
Secure Agentic IA Console Β· SOC Β· XDR Β· ICC
Monitoraggio operatori IA L1 per dominio Security. Console centralizzata: agent attivi, ticket gestiti/risolti/scalati, log attivitΓ , performance, token & costi.
Autonomia %FCR24/7Cost guard
πŸ›
VULN MGMT
Vulnerability Management Β· CVE Β· EPSS Β· Risk
Vulnerability response: risk-based prioritization, CVSS+EPSS+asset criticality, remediation workflow.
CVSSEPSSPatch
πŸ”
PAM
Privileged Access Management Β· Vault Β· JIT Β· Sessioni
Vault credenziali cifrato, discovery account privilegiati, accessi Just-In-Time e sessioni brokerate zero-knowledge β€” apri console dal ticket senza mai vedere la password.
VaultJIT/JEAZero-knowledgeAudit
πŸ”΄ SOC β€” Security Operations Center CORE
πŸ“ž
SOC
SOC Β· Security Operations
Coda SOC con filtro tier L1/L2/L3: alert triage, containment, investigation, SOAR.
🚨 AlertsπŸ€– SOARπŸ”¬ Investigation
πŸ“Š
EXEC
SOC Service Director Β· Executive cockpit
Cockpit director: cross-domain SOC/XDR/ICC/GRC/VR KPI, MTTR trend, compliance posture, budget security.
KPITrendCompliance
🟣 XDR β€” Extended Detection & Response CORE
πŸ“ž
XDR
XDR Β· Extended Detection & Response
Coda XDR con filtro tier L1/L2/L3: triage cross-domain, threat hunting, detection engineering.
TriageHuntCross-domain
πŸ”¬
EXEC
XDR Director Β· Cross-domain correlation
Correlation engine multi-source (EDR/NDR/SIEM/Email): unified incident view, threat scoring, KPI cross-domain.
CorrelationThreat score
πŸ›‚ ICC β€” Identity Compliance Cockpit CORE
πŸ›‚
ICC
ICC Β· Identity Compliance Cockpit
Coda ICC con filtro tier L1/L2/L3: access reviews, JML, SoD checks, anomaly detection.
AccessJMLSoD
πŸ“Š
EXEC
ICC Director Β· Identity Compliance Executive
Cockpit director ICC: oversight L1/L2/L3 Β· access reviews Β· JML compliance Β· SoD checks Β· identity anomaly trend.
ReviewsJMLSoD
βš– GRC β€” Governance Β· Risk Β· Compliance CORE
βš–
GRC
GRC Β· Governance Β· Risk Β· Compliance
Policy lifecycle, audit findings, control framework (ISO/NIST/PCI), compliance scorecards.
ISO 27001NISTAuditPCI
πŸ“Š
EXEC
GRC Director Β· Governance Β· Risk Executive
Cockpit director GRC: policy lifecycle Β· audit findings Β· framework (ISO/NIST/PCI) Β· compliance scorecards Β· risk register.
ISO 27001NISTAudit
πŸ“Š Dashboard & Reporting INSIGHT
πŸ“Š
DASHBOARD
Security Operations Dashboard Β· Real-time KPI
Dashboard SOC: alert per source, MTTR, SLA performance, top tactics MITRE.
KPIMITRESLA
πŸ“ˆ
REPORT
Security Report Center Β· Compliance Β· Executive
Report ricorrenti: weekly/monthly SOC summary, executive briefing, audit ready output.
PDFCSVExecutive
πŸŽ™
Voicemail Β· Inbox + AI risk score
VM ricevute da utenti / auditor / segnalazioni security. Audio player, AI risk scoring (Claude), callback integrato softphone.
πŸ”Š Audio🚨 RiskπŸ“ž Callback
πŸ“‹
SEGNALI
Log Alerts / Segnali Β· dai webhook receiver
Console degli alert generati dai sistemi monitorati (Sentinel, Elastic Security, CrowdStrike…) via webhook β†’ events-engine. SeveritΓ , stato, correlazione, anomaly detection.
πŸ”” AlertπŸ”— CorrelazioneπŸ›‘ Security