Phoenix Cyber to Present Customer SOAR Use Cases at Black Hat USA 2018

“SOC Automation: Real ROI” Presentation Hosted in Swimlane Booth #2304

PHOENIX, Ariz. – Aug. 2, 2018 – Phoenix Cyber was selected by Swimlane to present how Security Orchestration, Automation and Response (SOAR) provides real-world value to our clients. Phoenix will be presenting a series of quick, 7-minute presentations on Wednesday, August 8th and Thursday, August 9th in the Swimlane booth (#2304) at Black Hat USA 2018. Phoenix’s own Tom Goetz and Matt Rodriguez, both seasoned cybersecurity professionals, will present two different use cases throughout each day.

The first use case “STAT – Security Tool Alert Triage” will describe how alerts from various commercial off-the-shelf security tools can use automation to classify and perform initial triage with a SOAR platform, like Swimlane. The second use case “SWAG – Special Workflow and Action Gateway” describes how Swimlane automates vertical incident response workflows using common security tools to duplicate and identify out of compliance anti-virus and encryption nodes. Both use cases will illustrate how automation will lower the number of alerts, improve the efficiency of the analysts and increase Return on Investment (ROI) by needing fewer analysts to manage the significantly reduced workload.

Phoenix Cybersecurity | News | Black Hat USA 2018 Presentations

A recording of the presentation is now available on-demand (no registration required).

“The use cases we are presenting are from our work with a federal government agency, but the ratio of alert volumes and benefit of automation will be typical for enterprise Security Operations Centers as well,” said Brian Kafenbaum, Managing Partner of Phoenix Cyber. “We look forward to sharing our success stories and meeting with our clients and other security professionals throughout Black Hat.”

Topics covered in the other Swimlane customer presentations include: “The Future of SOC Hunting”, “Extending SOC Capabilities with SOAR” and “SOAR in the Real World”. The schedule for the Phoenix Cybersecurity presentations is:

Wednesday, August 8th

  • 11:00 a.m.
  • 1:30 p.m.
  • 3:00 p.m.
  • 5:00 p.m.

Thursday, August 9th

  • 11:00 a.m.
  • 1:00 p.m.
  • 2:30 p.m.

All presentations are held in the Swimlane Booth (#2304). For more information on Phoenix Cyber’s Security Orchestration, Automation and Response (SOAR) services, please visit If you would like to schedule an appointment to meet with the Phoenix Cyber team at Black Hat, please complete our Contact Us form.

About Phoenix Cyber

Phoenix Cyber is a leading cybersecurity consulting company providing security engineering, operations, and technical cybersecurity expertise to organizations determined to mitigate risk and safeguard their business. Since 2011, security teams from Fortune 500 enterprises, federal government agencies, and service providers have trusted Phoenix Cyber to deliver results-oriented, cybersecurity solutions and enhance their security operations centers’ people, processes, and technologies.

Learn more at or follow us on LinkedIn and Twitter.

Press Contact

Brian Kafenbaum
Managing Partner
(888) 416-9919