DFLabs IncMan vs. ServiceNow Security Operations

It is well suited for those that have DFLabs IncMan soar on cloud. It is less suited for on prem beside that it is possible to integrate very well but with more work to do it so.

Incentivized

Tight integration across ticketing, CMDB and ServiceNow Security Operations workflows automation module definitely stand out. In addition, the mean time to detection has reduced in my organization leading to a more efficient security operations with less burnout.

Incentivized

• Case Managment
• SOAR
• Building new/custom integrations
• workflow building system

Incentivized

• Automatically creates a ticket for security incidents.
• Complete root cause Analysis of the problem.
• Ability to provide more knowledge because of threat intelligence.

Incentivized

• Allow custom html on the return values from the workflow to the case, like let us put the outputs prettier
• Allow building custom integration just using openapi

Incentivized

• Even though I mentioned that we built incident response playbooks, we found the learning curve to be steep, having drag and drop or something similar to this would be appreciated

Incentivized

Seamless integration across modules mentioned in the previous sections along with the ability to automate security workflows are the main reasons.

Incentivized

Instead of integrating Spunk to ServiceNow ticketing and asset tool, I was able to get a native built in integration across ServiceNow modules and this helped a lot.

Incentivized

• Don't know not part of that process

Incentivized

• Positive ROI since most of the security incidents can be closed via a security centre.

Incentivized