Ambito di applicazione Mercati
Darktrace colma le lacune tra i sistemi di sicurezza che sono spesso isolati e consente un'allocazione più efficace delle risorse di personale.
A colpo d'occhio:
Si affida a Microsoft e Darktrace per la protezione in ambienti multi-cloud
L'intelligenza artificiale autoapprendente protegge l'intera azienda, dal cloud ai dispositivi endpoint
Le indagini automatizzate con Cyber AI Analyst fanno guadagnare tempo al team di sicurezza
Difendere il cloud con l'intelligenza artificiale
Scope Markets is 100% cloud-based, utilizing public cloud infrastructure and Microsoft 365. While its comprehensive migration to the cloud has facilitated flexible working and fast growth over the last four years, it has simultaneously expanded the attack surface and exposed the organization to new threat vectors.
The team at Scope Markets were already leveraging Microsoft security products – including Sentinel and Defender for Endpoint – to catch known cyber-attacks but turned to Darktrace to complement these solutions with an additional layer of insight. Darktrace uses Self-Learning AI to stop novel and sophisticated threats, the 'unknown unknowns' that evade signature-based tools.
The technology was set up in under an hour and immediately began learning from scratch, developing a continuously evolving 'pattern of life' for the organization, enabling it to detect subtle deviations indicative of attack.
La visibilità unificata e la visione multidimensionale sono fondamentali per garantire la protezione di organizzazioni come Scope Markets che sfruttano appieno il cloud. L'intelligenza artificiale autoapprendente di Darktrace mette in correlazione le attività delle applicazioni SaaS, come Salesforce e Microsoft 365, dei servizi cloud, come AWS e Azure, e di tutte le infrastrutture digitali on e off-premise per rilevare qualsiasi attività dannosa.
Furthermore, Darktrace's open architecture enables seamless integrations with disjointed defenses, streamlining alerts for the IT security team and instantly correlating insights across multiple siloes.
Sicurezza degli endpoint: Una visione olistica
Darktrace's Self-Learning AI takes into account activity from across the enterprise – from cloud applications to the corporate network, and down to the endpoint – something the security team found particularly valuable following the sudden transition to remote working in 2020.
Employees who were previously protected behind firewalls on office desktops were left more vulnerable to fraudulent or malicious websites. Having Darktrace on the endpoint shed a light on the anomalous activity that could expose the business to harm.
Learning the unique 'patterns of life' for every user and device within Scope Markets' cyber ecosystem, Darktrace provides a holistic view of the digital business to detect subtle indications of cyber-threat.
Secondo Terry Wright, Head of IT Infrastructure di Scope Markets, "Se accade qualcosa di insolito sull'endpoint e, pochi minuti dopo, qualcosa di insolito su Microsoft 365, Darktrace è in grado di riconoscerli come parte dello stesso incidente". Prima non avevamo questa possibilità".
Aumentare l'umano con indagini autonome
Oltre a proteggere da minacce nuove e sofisticate, Darktrace contribuisce a potenziare il team di sicurezza di Scope Markets con Cyber AI Analyst, che esegue automaticamente il triage, l'interpretazione e la segnalazione dell'intera portata degli incidenti di sicurezza.
The technology combines expert analyst intuition with the consistency, speed, and scalability of AI. Wright's team use Cyber AI Analyst to illuminate the highest priority threats at any one time, with the technology rapidly synthesizing all of the context around an attack into a natural language report. "Our alerts can be filtered with Self-Learning AI so that they're more relevant, saving time for our security team and enabling more efficient allocation of staffing," says Wright.
L'AI Self-Learning analizza il comportamento sull'endpoint insieme al comportamento in Microsoft 365 e nell'intero ambiente cloud.
