SOCFortress Integrations — IronScales Email Security

2 min readOct 5, 2023

Intro

SOCFortress integration and visualization tools allow security analysts the visualization and triage of IronScales Email Security security events using a single pane of glass.

About IronScales Email Security

Ironscales provide solutions to protect organizations from phishing attacks, ransomware, and other email-based threats. The company’s primary focus is on using advanced technology, including artificial intelligence and machine learning, to detect and respond to email threats in real-time.

Key features and aspects of Ironscales include:

Phishing Detection: Ironscales uses machine learning algorithms and threat intelligence to identify and block phishing emails. This helps organizations prevent employees from falling victim to phishing scams, which can lead to data breaches and financial losses.
Real-Time Email Threat Response: The platform offers automated threat response capabilities, allowing organizations to quickly and effectively respond to email-based threats. This includes automated incident investigation, remediation, and threat removal.
Employee Training and Awareness: Training and awareness programs to help educate employees about email security best practices. This helps reduce the likelihood of employees clicking on malicious links or opening harmful attachments.
Threat Intelligence Sharing: Ironscales facilitates the sharing of threat intelligence information among its customers, allowing organizations to benefit from collective knowledge about emerging threats.
Integration with Email Platforms: Ironscales integrates with popular email platforms like Microsoft Office 365 and Google Workspace, making it easy for organizations to deploy their solutions within their existing email infrastructure.
User-Friendly Interface: The platform offers a user-friendly dashboard that provides insights into email security threats and allows administrators to manage and monitor email security settings.

Ironscales aims to provide a comprehensive email security solution that helps organizations proactively defend against email-based threats and respond quickly when incidents occur.

Ingesting Ironscales Email Security Events

Integration via syslog forwarder to external SIEM:

SIEM settings in IronScales Management console

Visualizations

Events summary, type and severity:

Need Help?

The functionality discussed in this post, and so much more, are available via the SOCFortress platform. Let SOCFortress help you and your team keep your infrastructure secure.

Website: https://www.socfortress.co/