Tines

What do you like best about the product?

It’s very fast and easy to sign up. The visual approach makes the automation logic clear, and it’s simple to follow each step, troubleshoot issues, and make changes without having to dig through a lot of code.

What do you dislike about the product?

The main thing I dislike about Tines Stories is that workflows become difficult to manage as they grow. Also, there’s only limited functionality available for free, which makes it harder to fully use the product without upgrading.

What problems is the product solving and how is that benefiting you?

Tines Stories helps reduce repetitive manual work by automating routine tasks and connecting different tools and systems. It saves time, reduces the chance of human error, and makes it easier to create consistent workflows without having to build everything from scratch.

What do you like best about the product?

I love developing a systematic workflow of how information is being collected, checked for accuracy, routed to its proper destination, and appropriate actions are started without the necessity to manually transfer the same information through several systems.

What do you dislike about the product?

Workflow might become difficult to maintain if there are many conditions and numerous actions interconnected with each other. Any modifications that were made to the existing workflow require very careful testing as changes in one step might have consequences in the following steps of the Story.

What problems is the product solving and how is that benefiting you?

It is possible to reduce gaps in follow-up of customers as the processes become more predictable and consistent in their nature. Instead of expecting someone to spot the event and perform the next action, the workflow can handle those predictable actions on its own while leaving all exceptions for the human interaction.

What do you like best about the product?

I’ve primarily used Tines for incident response related workflows. We use it to automate alert triage and phishing cases which had a lot of repeat steps. The visual Story builder is very intuitive to use. We were able to automate alert enrichment, verification of suspicious indicators and routing cases with little to no code. Super helpful for DFIR work as I’m able to assemble most of the context before diving into the investigation.

What do you dislike about the product?

The Stories can get hard to manage if you don’t keep naming and documentation consistent. I’ve ran into instances where I needed to check multiple linked steps if we changed a small part of the workflow. Organization is key when you start to create more and more Stories.

What problems is the product solving and how is that benefiting you?

It has cut down on so much manual task work when handling incidents. Instead of spending time enriching and routing every alert, we are now able to automate that part and focus more time on analysis and response. It’s also allowed us to standardize the process across the team.

What do you like best about the product?

Tines Stories is helpful in converting regular processes of operations into proper workflows. It makes it easier to identify the relationships between various events in order to understand how an operation process should be carried out starting from its triggering to completion.

What do you dislike about the product?

Workflows management gets complicated when there are lots of exceptions and changes in business rules within the process. Sometimes, minor changes in one of the related systems make changes necessary in the workflow too.

What problems is the product solving and how is that benefiting you?

The approach minimizes the need for repetitive coordination efforts and creates more consistent processes. The workflows help to build the sequence for regular events and separate exceptions.

What do you like best about the product?

The Tines Stories allow for visualizing the entire workflow that connects actions, APIs, conditions, and changes to data on the storyboard. It allows seeing how data flows across actions, which is quite helpful for security workflows, since one process usually consists of multiple tools and decision points.

What do you dislike about the product?

Sometimes Stories are challenging to browse when a workflow gets really large. Also, there is a little learning curve associated with understanding the logic of events, actions, data transformations, and integrations. While the builder itself is low-code, some technical skills may be required for creating customized workflows.

What problems is the product solving and how is that benefiting you?

Tines helps automate the processes of phishing investigation, alert enrichment, incident response, and employee onboarding. Instead of having analysts manually transferring data from one tool to another in the security process, the story allows sending data through all the necessary steps in the process and involves human intervention only where necessary.

What do you like best about the product?

Tines Stories are really helpful in turning repetitive operational processes into precise and clearly defined procedures. I like that you can actually see the way information should go from one system to another and specify what exactly needs to happen on every stage. This allows you to better review and test the procedure before putting it into practice.

What do you dislike about the product?

A simple Story may get rather complicated after adding many exceptions and alternative pathways. Properly managing these paths requires thoughtful planning, especially when the workflow involves several other systems.

What problems is the product solving and how is that benefiting you?

Helps turn ad-hoc operational work into a repeatable and reliable process. After properly testing the workflow, standard occurrences will be handled by the same procedure while exceptions will require more personalized treatment.

Recommendations to others considering the product:

To manage complex workflows effectively, consider using visual mapping tools to outline all possible paths and exceptions. Regularly review and update the workflow to accommodate any changes in the systems involved.

What do you like best about the product?

Tines Stories is a great instrument for creating event-driven workflows focused on data processing. I can specify what is supposed to occur after a particular event, make it possible to transfer data between various applications, add branching for making decisions before performing certain actions. Visualization of Tines Stories makes the whole workflow much simpler to analyze as compared to analyzing separate scripts.

What do you dislike about the product?

Data workflows usually rely on upstream systems, which must function correctly to process a story. If a particular piece of information comes to the Story late or improperly formatted, it will require additional exception handling to avoid using incorrect data for automation.

What problems is the product solving and how is that benefiting you?

It can help to minimize the repetitive orchestration effort that comes along with data pipelines and events processing. Standardized workflows will also help to provide more predictable responses and reduce manual interventions.

What do you like best about the product?

The Tines Stories tool is useful because it allows you to take repetitive administrative tasks and make workflows out of them in an easy-to-understand manner. This makes it clear what kind of events trigger a process, what data is required to be processed, and what needs to happen next.

What do you dislike about the product?

Workflows can become difficult to manage when there are many exceptions to them. One change to a process might affect future actions, and therefore workflows need to be re-evaluated if there are any changes to the administrative process itself.

What problems is the product solving and how is that benefiting you?

It minimizes the amount of handovers that need to be done manually. When the process is correctly set up, the same process can be used repeatedly while exceptions can take a different route.

What do you like best about the product?

Tines Stories is a platform that helps turn a business scenario into an automated process. The graphical way of representation is useful because it shows how an event, logic and actions that take place as a result of the event are interconnected. It also makes the conversation with non-technical people much easier.

What do you dislike about the product?

As a Story gets bigger and more complex, it becomes more difficult to reason about it. The workflow seems simple at the beginning, however, when multiple systems and decisions are considered, one has to keep everything documented properly.

What problems is the product solving and how is that benefiting you?

It is a great tool for creating consistent processes out of repeated operations. Instead of considering each event separately, a Story gives us a pre-defined path that will handle all regular events and will route some events with special conditions for extra work.

What do you like best about the product?

I enjoy using Tines because it automates a lot of the repetitive tasks we typically perform when investigating threats. Checking an IP/domain/hash against multiple sources can become tedious when you are investigating several alerts. Tines allows us to create those workflows and receive all the enrichment in one area. Having a visual workflow builder also makes it easy to see what is happening at each step.

What do you dislike about the product?

Building the initial workflow can be time consuming if there are a lot of conditions or you are using multiple APIs. It can be difficult to troubleshoot if something breaks in the middle of a long story, especially if the returned data isn’t what you expected. After the workflow is working correctly it’s great but building/testing can take some time.

What problems is the product solving and how is that benefiting you?

The biggest win for threat intelligence in my opinion is just cutting down on manual enrichment/repeat steps. Rather than manually checking the same indicators in different tools you can automate part of that process and spend more time determining if the behavior is actually malicious and what you want to do about it. It also allows us to take care of mundane alerts quicker without removing the analyst from the equation.