ShadowPlex Threat Intel is a completely managed service that provides actionable intelligence on threats specifically targeting an organization. The solution enables proactive study of attacker behaviors and techniques using which the organization can stay ahead of potential threats, reduce risk, and enhance security posture.
Why do I need Targeted Threat Intelligence?
Threat intelligence is a collection of data that helps organizations understand and respond to cyber threats. It is used to identify potential risks, understand the motivations of attackers, and develop long-term security strategies.
Generic threat intelligence provides broad insights about emerging attack vectors and threat trends across industries.
Targeted intelligence provides actionable insights to directly address specific threats against an organization and includes detailed indicators of compromise (IoCs) like IP addresses, compromised credentials, geolocation of attacks and specific TTPs used, such as password spraying, brute force, credential stuffing attacks.
Preemptive
Cyber Security
Gartner defines preemptive cyber security as “an emerging category of cybersecurity technologies that are designed to prevent, stop or deter cyberattacks from achieving their objectives” and highlighted Acalvio as the innovator in Advanced Cyber Deception. ShadowPlex TI is a key pillar of preemptive cyber security by providing early threat detection, enabling security teams to proactively build appropriate security measures.
How does ShadowPlex Threat Intel work?
ShadowPlex Threat Intel deploys a number of external-facing decoys for web applications and other services that are typical of the services exposed for an organization. ShadowPlex TI is a managed service that includes customization, deployment and management of all the decoy services, which are hosted in the Acalvio cloud infrastructure. ShadowPlex TI filters the noise and generates specific intelligence on the threats targeting the enterprise, including TTPs, credentials used, geolocation, etc. The threat intel is shared using standard STIX format so that the organization can automatically consume and react on the information.
Key Features
Targeted Threat Intelligence
Detailed intelligence on threats targeting your enterprise. Provides actionable data for improved security posture against specific threats.
Includes information on Zero-day exploits
Deception is uniquely positioned to detect attacks not seen before. Our decoys alert on attacks that do not map back to any known exploits.
Easy Deployment
Completely managed service. Minimal deployment footprint – only needs installation of a single sensor in the customer’s DMZ. Acalvio manages the decoys and forwards the threat intel to the customer using STIX format.
Preemptive Cyber Security
Detects pre-attack stages. Provides alternate targets to the attackers and raises early warning on the attacks targeting the organization.
Enables Threat Hunting
Use targeted intelligence to proactively hunt for threats that may already compromised regular interfaces.
What does ShadowPlex Threat Intelligence Service include
Decoy Customization
Customer can choose from a wide variety of decoy types and Acalvio will customize the decoys as appropriate for the customer. Additional decoy types can also be created.
Hosting the Decoys
Acalvio will host and manage all the decoys in our own cloud infrastructure. This also removes all attacks against the decoys completely away from the customer’s network.
Threat Intel
All threat intelligence generated by the decoys is shared immediately using STIX. In addition, periodic reports can be scheduled.
Management Console
Customers can use the management console to view threat intel data, schedule reports, configure integrations etc.
Strengthen your Security Posture
Know your attackers!
Strengthening security posture requires knowledge of the attacks targeting your enterprise. ShadowPlex Threat Intel provides actionable threat intelligence that enables proactive measures to block targeted threats. Built on proven deception technology, ShadowPlex Threat Intel is offered as a completely managed service that is easy and quick to deploy.
Reach out today to learn more about our industry leading deception platform and how we can strengthen your security posture.