We are very excited to announce the new features of Cisco Stealthwatch! With release 7.0, we are introducing significant enhancements for the Stealthwatch administrator and the security analyst to detect and respond to threats faster, and manage the tool more efficiently.

Enhanced security analytics

Threats continue to evolve, and so do the analytical capabilities of Stealthwatch for faster and high-fidelity threat detection. The cloud-based machine learning engine (Cognitive Intelligence) includes:

• enhancements for more efficient botnet detection
• ability to analyze and correlate proxy logs to network telemetry for increased efficacy
• option to apply analytics to specific internal servers
• auto-update for cryptomining classifier to detect unusual and new cryptomining pools, and more!

Context-aware mitigation

Stealthwatch is integrated with Cisco Identity Services Engine (ISE) to provide additional user and identity context around a threat detection. This integration also allows the security professional to take action to mitigate the threat right from within Stealthwatch. Here