Slide 1: Mimecast for Rapid7
mimecast’ Mimecast for Rapid7
Slide 2: *Online Trust Alliance 2018.
*Online Trust Alliance 2018. 
Slide 3: SOAR + Email
SOAR + Email Security Orchestration, Automation and Response Benefits of integration TT fog) Rapidly collects and organize ingested threat intel Improve response time through automated — workflows Respond faster to contain and limit attack impact Mimecast’s open API integrates with SOAR platforms. ‘
Slide 4: Mimecast for Rapid7 Insight Connect
Mimecast for Rapid7 Insight Connect Gives joint customers a single space to set up automated responses to security threats mimecast: RAPID¥) Secure Email Gateway Insight Connect Ingest rich Mimecast Threat Intelligence : information Attachment Logs Event & Flow Data Manage Policies Orchestrate via A
Slide 5: Rapid7 InsightConnect
Rapid7 InsightConnect RAPID*) 507 1m 830 5 18 4 1 . Mimecast data is mapped directly into —— Rapid7’s SOAR (InsightConnect) to allow security analysts to create custom workflows to address a - plethora of attacks in minutes, through o-= rf Mimecast ‘02018 Mimecast. Al Rights Reserved mimecast a
Slide 6: Mimecast and Rapid7
mimecast’ RAPID
Slide 7: Use Case: Saving Time
mimecast’ Q G een Use Case: Saving Time ° Challenge: ° Attackers targeted multiple users simultaneously across an organization, generating hundreds of alerts resulting in more work for a security analyst. * Repetitive and time consuming tasks, causing alert fatigue and stripping an analyst’s time fo
Slide 8: Use Case: Investigation Visibility
ual Use Case: Investigation Visibility ° Challenge: ° Attack investigations require an analyst to keep all the evidence of an ongoing or completed investigation. * The analyst must also grab and archive evidence for full documentation once the investigation is complete. ° This results in manually ta
Slide 9: Mimecast and Rapid7
mimecast’ RAPID
Slide 10: Rapid7 — Mimecast Workflow
mimecast: ee Rapid7 — Mimecast Workflow = insightConnect v 7 gS O Home < Workflow Builder # sobs HE Setings lesa estonia ETT p ‘02018 Mimecast. All Rights Reserved mimecast ae) [cece mestaaton]
Slide 11: Mimecast Functions
mimecast: RAPID) Block Sender Prevent email delivery from malicious senders. Permit Sender Allow email receipt from trusted senders. Block Domain Prevent email delivery from malicious domains. Permit Domain Allow email receipt from trusted domains. Get Managed URLs Retrieve a list of all the current
Slide 12: Running a Job through Rapid7
mimecast: RAPID} Running a Job through Rapid7 © © 5 Aaministaionconscle x | FD Setings % BD insantconnect x + © > & uscomectinsign.rapi7.com/7F9" ar o00e @o 2 Home <_ Running Jobs Search for jb 1 all 2 Workflows o Jobs + 2 minutes ago Spearphishing Remediation with Mimecast 6bb58701-7290-4ade-acd4-1
Slide 13: Completing a Job through Mimecast
mimecast: RAPID} Completing a Job through Mimecast = wwe Yin ome ae € > © @ login-sandbox.mimecast.com/administration/spp/#//policies * 000800 mimecast 1% Aamnievaton Ssauch Mnecese Conta a 0 aon Bi (@0mainz com) Everyone B lock sencor ermal LF virost Bh (@omainz com Everyone: B Block sender crema L