Supporting a more effective Incident Response process
The information gathered by Beacon provides a view of all network-attached devices in terms of location, addressing, identity, and other contextual values as well as a historical view of the endpoints lifecycle in the network. This allows the network or IT security administrator to look back through time and view the state of the endpoint landscape at different points in the past. When the recipient of the information related to the incident needs to locate an endpoint it is possible, or even likely, that the location and address may have changed since the time of the event making Beacon’s time-based contextual information critical in effectively closing IT security incidents. In addition, the contextual supporting information that is provided by Beacon may enable the person handing the incident to locate, disable, or vouch for the endpoint in question with a more robust view of its identity and function.