CLOUD COLLABORATION APP PROTECTION
Darktrace DETECT + RESPOND/Apps
Darktrace/Apps builds an evolving understanding of you to detect and respond to anomalous behavior in cloud applications.
DaRKTRACE
DETECT
™
/
Applicazioni
Autoapprendimento dell'intelligenza artificiale
Rileva le anomalie
Analisi del rischio e del contesto
Conduce indagini autonome su scala
Cyber AI Analyst
DaRKTRACE
RESPOND
™
/
Applicazioni
Autoapprendimento dell'intelligenza artificiale
Autonomous Response
Cyber AI Analyst
Risponde autonomamente alle minacce in pochi secondi
Si integra attivamente con lo stack di sicurezza
Supporta l'intervento umano nel processo decisionale
SEAMLESS INTEGRATION
Connecting to all apps, via API
Darktrace interacts directly with the SaaS vendor to understand activity within that cloud service.
DARKTRACE
DETECT
TM
/
Applicazioni
CAPIRE LA NORMALITÀ
Deployed passively.
Analyzing every user event.
Asking millions of questions.
Analyzing every user event.
Asking millions of questions.
Darktrace/Apps detects threats using AI algorithms that make millions of calculations from real-time data. By correlating subtle anomalies, Darktrace DETECT can distinguish sophisticated threats from benign activity in your SaaS applications.
All context considered, is the user's activity normal?
And issues the perfect counter response for the threat.
And issues the perfect counter response for the threat.
Punti dati grezzi
Extracted directly from cloud applications
Login
Failed login
Resource viewed or modified
File uploaded
File downloaded
Resource created
. . .
Punti dati arricchiti di Darktrace
Caratteristiche dei dati matematiche e potenziate dall'intelligenza artificiale
Is this actually this user?
Does this location match expectations?
Has this user changed their credentials?
Does the user usually log in from this device?
Is this time unusual for the user? The company?
Do any other users log in from this country?
. . .
Eventi comprensibili
Matematica complessa,
output semplice
output semplice
Darktrace DETECT produce avvisi intuitivi e di facile comprensione, riducendo il time-to-meaning per i team di sicurezza.
RILEVAZIONE → MITRE
Mappatura Darktrace MITRE
Darktrace DETECT models are automatically mapped to the MITRE attacks & techniques within the user interface when activity is detected
See Darktrace DETECT/Apps in your own environment. Get a demo.
Ready for your collaboration
Scales to your business needs.
One-click integrations and rapid, remote deployment makes it easy for you to add and remove SaaS applications covered by Darktrace. The frequency of Darktrace’s queries can be adjusted in consideration of any other applications that may also use HTTPS requests.
One-click integrations and rapid, remote deployment makes it easy for you to add and remove SaaS applications covered by Darktrace. The frequency of Darktrace’s queries can be adjusted in consideration of any other applications that may also use HTTPS requests.
DARKTRACE
RESPOND
TM
/
Applicazioni
Autonomous Response for SaaS
È una questione di precisione.
When a threat is detected with high confidence, Darktrace RESPOND/Apps takes action in near real time to stop an attacker or malicious insider in their tracks.
Darktrace RESPOND takes proportionate action to ensure the threat is neutralized in the least disruptive way possible.
Darktrace RESPOND takes proportionate action to ensure the threat is neutralized in the least disruptive way possible.
Darktrace RESPOND/Apps can take a range of actions, according to the nature of the threat.
Non è necessaria alcuna azione
Bloccare connessioni specifiche
Restrict a user from select applications
Restrict file sharing settings for certain folders
Logout user
End a user's active sessions
...
A deeper dive into RESPOND actions:
Connessioni specifiche del blocco
Darktrace RESPOND/Apps identifies the specific, external connections attempting data exfiltration, and interrupts them. Benign connections are undisturbed.
Remove a user from select applications
Darktrace RESPOND/Apps can force a user logout only on selected applications where they appear to be compromised.
Restrict File Sharing Settings
In the event of a suspicious upload of data to an internet server, Darktrace RESPOND/Apps can temporarily restrict file sharing for specific files, folders, or users.
End User's Active Sessions
In cases of a high-confidence account takeover, Darktrace RESPOND/Apps will end a user's active sessions across all devices.
Completamente configurabile e personalizzabile
Darktrace RESPOND opera secondo i parametri indicati dall'utente.
Only on certain devices? At certain times of day? In response to certain events?
You set the guide-rails. Then let the AI do the heavy lifting.
ENHANCE existing workflows
Integrazioni con un solo clic
Darktrace/Apps integrates seamlessly with all
major cloud applications.
major cloud applications.
Explore /Apps integrations
Rimanete aggiornati con l'applicazione mobile di Darktrace
La supervisione completa delle azioni di Darktrace RESPOND è fornita attraverso l'interfaccia Threat Visualizer di Darktracee e tramite la Mobile App Darktrace
.
.
Scarica su:
Analista di intelligenza artificiale
Il Cyber AI Analyst di Darktrace analizza ogni risultato di Darktrace DETECT per rivelare l'incidente più ampio, fornendo tutti i dettagli necessari in un solo clic.
Combina l'esperienza umana con la velocità e la scala dell'IA
AI Analyst viene addestrato su un set di dati in continua crescita di esperti analisti informatici. Osservando e replicando il loro comportamento, la tecnologia ragiona come un investigatore umano: ponendo domande, testando ipotesi e giungendo a conclusioni.
Taglia il rumore
Di conseguenza, può svolgere il lavoro pesante per conto dei team umani, collegando i punti tra decine di eventi singoli e riducendoli a una manciata di incidenti ad alta priorità per la revisione umana.
Aumenta il vostro team
AI Analyst riduce i tempi di triage in media del 92%. In questo modo il team di sicurezza può dedicare il proprio tempo a compiti strategici piuttosto che alla lotta antincendio reattiva.
Il risultato finale?
Rapporti sugli incidenti generati dall'IA che
chiunque può capire.
chiunque può capire.
Dal vostro consiglio di amministrazione, al vostro nuovo titolare.
Storie di clienti
