Actu
RiskIQ Offers Security Analysts Free Cyberthreat Hunter and Defender Tools with RiskIQ Community Edition
February 2017 by Marc Jacob
Recognising the power of team collaboration and online communities, RiskIQ, the leader in digital threat management, launched a Community Edition of its RiskIQ PassiveTotal® and RiskIQ™ Digital Footprint products at no cost to security analysts. Fast and simple registration sets cyberthreat hunters and defenders on the path to superior discovery, investigation and research of threats, as well as the means to collaborate with peers to further mitigate security exposures outside the firewall.
With features now available through RiskIQ Community Edition, threat hunters can more efficiently investigate external threats and attack infrastructures, and threat defenders can better understand and protect their digital attack surface. The latest Community features available include:
• Projects – allows security analysts to designate and group indicators of compromise (IOC), threat artefacts and infrastructure elements, such as domains, IPs, website trackers, WHOIS registrant and other external threat details, as projects to be shared publicly with other analysts. RiskIQ Projects enable investigation collaboration, transfer of working files to other team members, and the means to manage and maintain a workspace for on-going research.
• Monitors – alerts security analysts when changes to project artefacts, such as new IP resolutions in a domain, new domain registrations using known bad information, and other modified infrastructure elements, are identified. Monitors provide the means for individual analysts, teams, and public collaborators to keep track of external threat actors, their exploits, and their dynamic assault infrastructure for proactive detection, investigation, and pre-emption of attacks and malicious activity.
• Interactive Guides – provides security analysts who are new to RiskIQ products, a tour of new or context-related features including insight into popular or instructive threat discovery, analysis, or monitoring activities.
• Community Knowledge – harnesses the collective intelligence of the global security community by showcasing projects featuring adversary investigations, compromised sites, phishing campaigns, malware and ransomware infrastructure as curated by RiskIQ and third party researchers.
• Automated Footprints – leverages RiskIQ’s vast data sets and predictive analytics to automatically generate a graph of connected, internet-facing assets across large and complex entities. Threat defenders can interact with visual aids and unique security insights to uncover exposures in their attack surface.
RiskIQ Community Edition members gain access to the industry’s most comprehensive publicly available, proprietary and derived internet data sets delivered by RiskIQ’s Digital Threat Management platform. Security analysts can readily pivot between these enriched and correlated data sets to intelligently surface seemingly unrelated threat infrastructure to get ahead of attackers and prevent their next moves.
Availability:
The Community Editions of RiskIQ’s products are available at no charge. RiskIQ PassiveTotal Community Edition allows security analysts to investigate and keep track of adversaries and threats. RiskIQ Digital Footprint Community Edition allows organizations to understand and monitor their internet-exposed assets. Try them by visiting https://www.riskiq.com/community/. Users can conveniently upgrade from RiskIQ Community to Premium and Enterprise Editions for greater functionality and capacity.
