The company will show how its Threat Detection and Response (TDR) and Managed Detection and Response (MDR) suites can deliver actionable intelligence that reduces alert fatigue
Vectra AI, cybersecurity leader in the detection and resolution of cyber threats for hybrid and multicloud enterprises, has announced its participation in GITEX Global 2022 in Dubai, the most important technological event in the Middle East, where it will show how to reduce alert fatigue for security teams and how to organize a more effective defense of digital assets by exploiting attack-signal intelligence, the intelligence applied to attack signals. The October event will be the first GITEX where Vectra will operate its own stand.
"Over the past two decades, cyber threat detection and response methodologies involving people, processes and technologies have relied heavily on signatures, anomalies and rules to identify and stop cybercriminals in their infiltration and exfiltration campaigns. However, as businesses move to hybrid and multi-cloud environments and digitize identities, supply chains and ecosystems, these approaches only increase the number of alerts, triage and false positives," he commented Taj El-khayat, Managing Director for EMEA South at Vectra AI. "Organizations very rarely know where the gaps in their security infrastructure are. And this is a great advantage for attackers, who continually bypass prevention systems, evade signatures, camouflage, infiltrate and advance with lateral movements within an organization to wreak havoc."
Vectra's focus on intelligence applied to attack signals is based on the proven ability to improve an organization's resilience to attacks. Unlike other approaches that focus on anomaly detection and require human tuning and maintenance, Vectra's attack-signal intelligence unmasks the entire plot of an attack by continuously monitoring attackers' known tactics, techniques and procedures (TTPs) and running pre-defined models in real-time to detect and correlate those TTPs and select the threats most relevant to the business.
Vectra's signal-intelligence approach makes processes and workflows more efficient. Reduces SIEM costs and the need to create discovery rules. It enables the automation of many traditionally manual tasks and speeds detection and response. Furthermore, it optimizes investments in EDR, SOAR and ITSM and makes the work of analysts who hunt for threats more effective, significantly reducing the incidence of false positives and alleviating the so-called "alert fatigue", the fatigue of those exposed to continuous alerts.
“Vectra has spent more than a decade researching, developing, testing and patenting AI-powered security focused on eliminating the unknown,” El-khayat explained. "Attack-signal intelligence allows security managers to think like cyber criminals and anticipate their tactics, techniques and procedures. Our focus is on reducing background noise from alerts and easing the workload of security teams, and it's something that is proving successful across the region."
At GITEX, Vectra will focus on the capabilities of its Threat Detection and Response (TDR) and Managed Detection and Response (MDR) suites to deliver attack-signal intelligence. Vectra TDR is designed for today's hybrid and multi-cloud environments and provides coverage, clarity and control to SOCs. Threat visibility extends to a number of widely used cloud services, such as AWS, Microsoft 365, and Azure AD. AI-driven attack-signal intelligence is used to automate threat detection and triage results for priority investigations. AI-enabled operations enable integrated investigations, workflow automation and targeted responses.
Vectra MDR is a proactive, year-round, 24-hour monitoring service that keeps security teams informed of the most immediate and potentially harmful threats in their environment. Vectra offers its expertise to interpret the early warning signals identified by its TDR platform and expert analysts are available, day and night, to support SOCs in eliminating the most sophisticated attacks.
At GITEX 2022 the company has reserved a space with three demonstration screens that will show the different capabilities of SOCs (security operations centers): one for detection, one for response and one for ecosystem integration with technologies such as Splunk and CrowdStrike. Vectra will also manage a dedicated cloud demo area.
“We are excited about the opportunity that GITEX 2022 gives us to raise awareness of attack-signal intelligence,” said El-khayat. "Vectra's TDR and MDR offerings focus on empowering teams to own their environment and be ready for even the biggest, most dramatic incident. Signal intelligence makes organizations more resilient to attacks and ensures truly malicious infiltrations don't slip under the radar of overworked, under-resourced teams."
