How can our SOC video wall display important Events as they happen?

Camio Event Streaming pushes Events to your browser as they happen for key advantages over live video in triaging and remediating incidents.

Event Streaming

For Security Operations Center (SOC) staff to see highlights of the important events as they happen (displayed on video walls without touching a keyboard) Camio provides Auto-scrolling Event Streaming.

When you enable Event Streaming for your domain, each browser window displays newly arriving Events as they happen. The new Events are appended to the bottom of the search results. Each window then scrolls to ensure the newly added Events are within view.

To start Event Streaming, make sure that the last row of results is at least partially visible in your window.

To stop Event Streaming, scroll up (earlier) at least one row so that the last (latest) row is no longer visible.

Machine Learning selects the most salient cover images for quick review. So the SOC video wall has actionable Events to review rather than empty live streams. Each window can have its own query too, so the SOC video wall can be partitioned into related groups of cameras (see camera queries).

Event Streaming maintains PubSub websocket connections to all clients to continually fetch new results as new Events arrive, so it's an add-on feature that must be enabled at the domain or account level. Contact your integrator for information.

Advantages over Live Video

Unlike a bank of live video monitors, often with nothing significant happening on them, Event Streaming pushes the real Events that warrant human review as they happen. Some key advantages of Event Streaming are:

  1. Nothing missed
    Security Staff see everything, even if they had to look away or answer a call. Rather than visually scanning live video themselves, Camio identifies anything that warrants attention and pushes the Event in need of review.
  2. 50x faster triage
    Camio automatically summarizes each event to choose the most salient cover image. Each Event also includes a series of thumbnails representing the most salient portions of the Event, so rather than reviewing video in linear time, staff quick "scrub" the Event to see whether it warrants video review. 90% reduction in false positives multiplied by 5x faster review produces 50x faster triage.
  3. Force multiplier
    The same staff can cover more cameras, not only because of the 50x faster triage but also because they're not scanning video. Typical commercial office settings average about 6 hours per day of real objects moving. Since Camio pushes Events via Event Streaming, time and attention go to that 25% of the video.

 

See also https://help.camio.com/hc/en-us/articles/360032757952-How-can-our-SOC-display-Events-from-all-accounts-as-they-happen-

 

Have more questions? Submit a request

Comments