Unified configuration
From the Unified Settings screen, you can define everything you need in one place: playbooks, integrations, utility commands, schedules, user permissions, and more. This makes it easier and faster than ever to set up and adjust your platform, without having to switch screens to find what you’re looking for.

Boards
D3 dashboards provide an overview of event and incident data, pending tasks, and adversary TTPs (Tactics, Techniques and Procedures). All mission-critical data is available at a glance to manage and, when necessary, drill down deeper.

Integration
D3 integrates with more than 400 tools to orchestrate and automate security actions for your entire infrastructure. This simplifies security operations and accelerates incident response by connecting disparate tools and data silos through a single center.

Playbooks
The D3 playbook library provides proven answers for the use cases that every SOC must be prepared for. Resolve incidents quickly and conclusively with workflows built to industry standards and customized to your exact needs.

Full-Picture MalOps
Malicious operations (MalOps) are high-fidelity incidents that bring together multiple events and contextual data into a single attack image. Instead of tracking down every piece manually, you can quickly perform analysis and response across the entire attack, while continually expanding your understanding with new data.

Playbooks and low-code integrations
D3’s visual playbook editor makes it easy to create, edit, test, and publish playbooks powered by automation, with orchestrated drag-and-drop actions across tools. The low-code editor is intuitive and easy to use, regardless of your coding experience, freeing up internal resources and empowering all users to create and optimize playbooks.

Automated enrichment
D3 automatically enriches security events using threat intelligence, incident awareness, and MITER ATT&CK data. This allows you to save time wasted in manual intelligence searches and be able to quickly determine which events require immediate attention.

Response Orchestration
D3 ensures rapid validation and response to incidents by expertly orchestrating automated actions and manual inputs. This enables rapid action across the environment without compromising flexibility or human oversight.

MITER ATT&CK Surveillance
D3 can search past events and monitor future events for instances of important ATT&CK tactics, techniques, and procedures. This means you can automate monitoring for the most pressing threats in your environment, knowing that you will immediately receive an alert when they are detected.

Jinja Template Data Formatter
With over 130 data filters, D3 transforms incoming data to make it easily usable for playbook creation and testing. This eliminates the need for manual transformation or searching through mapped fields to find the data you need.

Investigation and Case Management
D3 case management capabilities include collaboration features, automated evidence documentation, response activities, and granular access controls to securely share information. You can tackle complex investigations from start to finish with confidence, even when they expand beyond the SOC to involve other teams.

Threat hunting
D3 automates threat hunting across your environment through its 400+ integrations. You can save time spent on slow, manual threat hunting, while ensuring that threat hunting isn’t overlooked when your team is busy.

SOC Metrics
D3 provides comprehensive SOC metrics that can be compared to predetermined benchmarks and converted into automated reports. By collecting security data in D3, you can easily find and share the data you need, from simple analytics to compliance reports.

XGEN SOAR from D3 SECURITY @ Softron, Uruguay and Argentina.