AI-driven Security Attack Signal Intelligence automates the detection, selection and prioritization of cyber threats across public clouds, SaaS, identities and networks
Vectra AI, the cybersecurity leader in cyber threat detection and remediation for hybrid and multicloud enterprises, announced today Attack Signal Intelligence, an innovative technology that automates detection, threat selection, and prioritization for SOC teams. As organizations face ever-increasing unknown cyber threats targeting on-premises and cloud infrastructure, SaaS applications, and data and identity systems, SOC teams must keep pace. A greater attack surface to cover, combined with more advanced, elusive and sophisticated attackers, has led to an increase in manual time spent maintaining detection rules, selecting alerts and prioritizing them, resulting in analyst fatigue and burnout. Vectra's AI-driven Security Attack Signal Intelligence frees security analysts from these mundane, daily manual tasks and empowers them to do what they do best: investigate and respond to real attacks. At the heart of Vectra's ever-expanding platform, services and ecosystem, Attack Signal Intelligence enables security analysts to:
- Think like an attacker, thanks to detections based on Artificial Intelligence that go beyond signatures and anomalies to understand the attacker's behavior and identify their TTPs (tactics, techniques and procedures) along the entire cyber kill chain.
- Know what is harmful analyzing detection patterns unique to an organization's environment to surface relevant events and reduce background noise.
- Focus on the urgency with AI-based prioritization, which provides insight into threats based on severity and impact, allowing analysts to focus on responding to critical threats and reducing business risk.
Security teams today are challenged by the need to defend an ever-expanding attack surface, increasingly evasive attack methods, and an ever-increasing background noise of security alerts. All of these challenges contribute to making cyber threat actors increasingly capable of bypassing prevention tools, evading signatures and detection rules, and bypassing multi-factor authentication to infiltrate and advance laterally within an organization without being noticed. According to the Global Research Study at Vectra, 72% of security professionals believe their organization suffered a breach without realizing it.
"Unknown compromise is the biggest security risk organizations face today. Much more complex environments, with greater attack surface exposure, more elusive attack methods, and enough noise to overwhelm analysts are all factors that lead to new unknowns for security teams," he said Kevin Kennedy, SVP Product di Vectra. "To eliminate these unknowns, security teams need more reliable, accurate and timely intelligence across all entry points and attack surfaces. Vectra's Attack Signal Intelligence is the first technology of its kind to automate threat detection, selection and prioritization, so defenders can anticipate and stay ahead of modern cyber attacks. Threat intelligence gives security confidence to mitigate known threats. Vectra Attack Signal Intelligence gives security confidence to mitigate threats previously unknown."
By leveraging Attack Signal Intelligence with the Vectra platform, Vectra MDR services and the Vectra ecosystem, security teams detect real attacks and their progression along the cyber kill chain, so they can quickly investigate an attack and prevent it from becoming a breach. Unlike AI-based anomaly detection approaches that require human tuning and maintenance, Vectra Attack Signal Intelligence continuously and automatically monitors attackers' methods with a series of Security AI models programmed with an understanding of attackers' TTPs. The results pass through another layer of AI that combines an understanding of the organization's environment with threat modeling and human threat intelligence to automatically surface and prioritize threats based on severity and impact. The result is that security teams are 85% more efficient at identifying real threats and achieve two times the productivity of security operations.
Vectra Attack Signal Intelligence is integrated into all Vectra Cloud, Identity and Network Detection and Response products and services:
- Vectra CDR per AWS
- Vectra CDR per Microsoft 365
- Vectra IDR per Microsoft Azure AD
- Vectra NDR per reti on-premises e cloud
- Vectra MDR per cloud, identity e network threat detection and response
