Case Study: Professional Services Company accelerates malicious indicator blocking with ThreatConnect

Automating the Process of Blocking Malicious Indicators with Playbooks

Professional Services Company, a ThreatConnect customer since 2016, needed to reduce the time between its Threat Intelligence team identifying malicious indicators and its Networking team implementing block controls. Before ThreatConnect, analysts had to submit tickets or emails to request manual blocks, and they had no visibility into whether those indicators were actually blocked.

With ThreatConnect’s Dedicated Cloud platform and Playbooks, the Threat Intelligence team was able to push IOCs directly into the Check Point Firewall block lists from within ThreatConnect. This automated workflow eliminated ticketing overhead, reduced workload for both teams, and gave the customer a dashboard for tracking blocked malicious indicators, making the organization more efficient and secure.