Download PDF
NETSCOUT > Case Studies > Hospital Achieves Enhanced Security Posture and Reduced OPEX with NETSCOUT and Splunk Integration
NETSCOUT Logo

Hospital Achieves Enhanced Security Posture and Reduced OPEX with NETSCOUT and Splunk Integration

Technology Category
  • Analytics & Modeling - Real Time Analytics
  • Cybersecurity & Privacy - Network Security
  • Networks & Connectivity - Network Management & Analysis Software
Applicable Industries
  • Healthcare & Hospitals
Applicable Functions
  • Maintenance
  • Quality Assurance
Use Cases
  • Cybersecurity
  • Edge Computing & Edge Intelligence
  • Predictive Maintenance
Services
  • Data Science Services
  • System Integration
The Challenge
The regional healthcare organization was struggling with an overload of alerts from various security tools, making coordination difficult and error-prone. The Mean-Time-to-Resolution (MTTR) was significantly higher than desired, sometimes reaching multiple weeks. The security operation center (SOC) analysts were constantly switching between security tools, spending too much time bouncing back and forth rather than quickly finding Indicators of Compromise (IoCs) to stop attacks. Coordination between the various security tools was poor and sometimes nonexistent. All these tools had excellent GUIs, but they were designed only to provide functional value within their own cybersecurity feature set and did not share data with context. What was needed was a way to quickly correlate data across multiple tools.
About The Customer
The customer is a regional healthcare organization with several hospitals and offices that serve more than 500,000 patients annually. Their IT infrastructure has a wide range of hardware and software systems to support clinical and administrative operations. The organization has a complex hybrid cloud environment with various software applications, such as electronic health record (EHR) systems, patient scheduling and billing systems, as well as clinical decision support tools. Additionally, the organization has invested millions of dollars protecting patient data.
The Solution
The organization chose Splunk Enterprise as a central platform and dashboard for collecting all the alerts across these different security tools. NETSCOUT’s partnership with Splunk brings the NetOps and SecOps teams together through a unified view of network and security events from NETSCOUT Omnis Cyber Intelligence (OCI) and nGeniusOne® in the Splunk SIEM portal. NETSCOUT OCI is a platform for Advanced Network Threat Detection and Response (NDR) that helps security teams easily detect, validate, investigate, and respond to threats. The NETSCOUT Omnis Cyber Intelligence App for Splunk helps teams perform network threat, risk detection, and cybersecurity incident investigation. Omnis™ CyberStream network instrumentation deployed in the hybrid cloud continuously capture packets and in realtime converts those packets into a reliable source of layer 2 – 7 metadata called Smart Data.
Operational Impact
  • Alert prioritization across security tools enabled teams to focus on the most critical Indicators of Compromise (IoCs).
  • Better intelligence for faster detection, investigation, and remediation and reduced Mean-Time-to-Resolution (MTTR).
  • Improved network operations (NetOps) and Security Operations (SecOps) collaboration.
Quantitative Benefit
  • Reduced MTTR in some cases from several hours to minutes.
  • Increased productivity through faster detection, investigation, and remediation.

Related Case Studies.

Contact us

Let's talk!

* Required
* Required
* Required
* Invalid email address
By submitting this form, you agree that IoT ONE may contact you with insights and marketing messaging.
No thanks, I don't want to receive any marketing emails from IoT ONE.
Submit

Thank you for your message!
We will contact you soon.