Actu
Cyberbit’s new Endpoint Detection and Response Release Advances Cybersecurity with Adaptive, Automated Capabilities
April 2017 by Marc Jacob
Cyberbit, the wholly owned subsidiary of Elbit Systems whose cybersecurity solutions protect the world’s most sensitive systems, announced a new version of its adaptive Endpoint Detection and Response (EDR) platform, which now provides advanced and semi-automated threat hunting, centralized response capabilities, and an improved Software Developer Kit (SDK) for detection customization. Originally developed to meet requirements of high-risk organizations, Cyberbit’s new EDR enhancements help customers decrease threat detection and response times while minimizing false positives, drastically improving cyberattack countermeasures and cutting distractions for security teams.
Cyberattacks continue to shift tactics, with hackers launching fileless malware that is undetectable by ransomware safeguards, antivirus and other traditional endpoint protection platforms. Cyberbit EDR’s approach detects a broad range of attacks without relying on indicators of compromise (IOCs), including signature-less, fileless and targeted attacks as well as ransomware. The adaptive approach automatically tailors a behavioral detection policy to the customer’s organization, which ensures the highest levels of accuracy based on each environment.
The new release includes the following key features:
Analyst in a Box: Analysts often work with fragments of the attack story; using their knowledge and experience, they seek traces of attacks buried in data. Cyberbit’s EDR platform assists analysts by automating much of the hunting process, leveraging behavioral analytics and machine learning, which serves as an “analyst in a box,” speeding up threat identification and often saving weeks of investigative effort.
SDK and customization: Advanced customers can add proprietary detection algorithms to address their unique security requirements. They can also access the EDR’s big-data repository using Application Programming Interfaces (APIs), and use their own functions and tools to proactively investigate and hunt threats.
Centralized response capabilities: well suited for large, dispersed organizations, security managers can access any endpoint in the organization from a central location and rapidly investigate and respond to an incident, which eliminates the need to be physically present at the compromised endpoint.
Cyberbit was recently named by CRN magazine one of 20 coolest endpoint security vendors for 2017. Cyberbit EDR is the winner of the Frost and Sullivan Technology Leadership Award for Cybersecurity Detection and Response, and the winner of the Network World Asia Reader’s Choice Rising Star award for endpoint security. Cyberbit recently announced a contract with Infor to provide its EDR platform.
The new Cyberbit EDR is available to all customers immediately.
