XDR leader introduces pioneering threat detection and response capabilities to protect against attacks targeting Microsoft Copilot for M365
Vectra AI, a leader in detecting, investigating and responding to hybrid attacks, today announced the expansion of Vectra AI Platform to protect businesses from new threat vectors introduced by the rapid adoption of generative AI (GenAI) tools. L'Attack Signal Intelligence™ Vectra's patented AI Platform uses behavior-based Artificial Intelligence to defend organizations from cyber attackers who abuse GenAI, enabling Security Operation Center (SOC) teams to thwart GenAI attacks with AI.
Rapid technological advances have meant that organizations are increasingly turning to GenAI-based tools to streamline processes and improve their work. GenAI tools like Microsoft Copilot aim to increase employee efficiency and productivity, but they also create new attack surfaces, since the Large Language Models (LLMs) that power these tools have access to proprietary business data. As a result, while GenAI tools increase the speed at which employees and organizations can operate, they also grant attackers the same luxury, allowing them to exploit identities to spread attacks at a faster pace and faster. higher level.
“For over a decade, Vectra AI has been at the forefront of using Artificial Intelligence to counter advanced and emerging cyber threats. Our mission has been and always will be to provide the most accurate attack signal at speed and scale, enabling us to find and identify attacks that other solutions cannot detect,” he said Hitesh Sheth, founder and CEO of Vectra AI. “With more and more companies using GenAI tools to boost employee productivity, SOC teams are facing a new attack surface – one that can only be protected with AI. Our new AI-driven detection capabilities specific to GenAI attacks enable SOC teams to fight AI with AI, allowing them to operate at the same speed and level as attackers.”
SOC analysts must leverage AI to defend their organizations from AI-based attacks. The Vectra AI Platform uses Artificial Intelligence and Machine Learning (ML) to detect threats across all attack surfaces consisting of network, identity, cloud, SaaS and GenAI. Attack Signal Intelligence classifies, correlates and prioritizes threats with the highest level of accuracy, so SOC analysts can isolate and contain real attacks in minutes. With the addition of GenAI coverage, the Vectra AI Platform empowers SOC teams to spot and stop emerging attack techniques that leverage GenAI tools.
The Vectra AI Platform can now detect cybercriminals who compromise an identity and leverage Microsoft Copilot for M365 to execute their attacks and gain access to sensitive applications and data in minutes. To achieve this, the Vectra AI Platform offers:
- detection and coverage of GenAI attacks leveraging Microsoft Copilot, including suspicious logins, data discovery and jailbreak attack techniques;
- correlation and attribution of GenAI detections with Microsoft Entra ID, Microsoft 365, AWS, and Active Directory identities;
- Microsoft Copilot GenAI detection prioritization with network (Vectra NDR), identity (Vectra ITDR), and cloud (Vectra CDR) detections;
- metadata integration across network, identity, cloud and GenAI attack surfaces for immediate and advanced investigations;
- native, automated and managed response actions to block hosts and accounts involved in the attack.
“Over 40% of Vectra AI identity customers have started adopting Microsoft Copilot for M365 in their enterprise,” he said Jeff Reed, Chief Product Officer of Vectra AI. “This new expansion of the Vectra AI platform helps SOC analysts protect identities and stop attackers who abuse GenAI tools.”
At the Vectra AI Platform
The Vectra AI Platform provides defenders with the most integrated and accurate signal for extended detection and response (XDR). Vectra AI's Attack Signal Intelligence enables SOC teams to effectively search, detect, prioritize, investigate and respond to threats across their entire hybrid and multi-cloud infrastructure in minutes, stopping them before they become breaches.
To learn more about the Vectra AI Platform, visit Vectra AI al NASDAQ Center during the RSA Conference, scheduled for today through May 9 in San Francisco, California.