CLOUD COLLABORATION APP PROTECTION
Darktrace DETECT + RESPOND/Apps
Darktrace/Apps builds an evolving understanding of you to detect and respond to anomalous behavior in cloud applications.
DARKTRACE
DETECT
™
/
Apps
IA de autoaprendizaje
Detecta anomalías
Analiza el riesgo y el contexto
Realiza investigaciones autónomas a escala
Cyber AI Analyst
DARKTRACE
RESPOND
™
/
Apps
IA de autoaprendizaje
Respuesta autónoma
Cyber AI Analyst
Responde a las amenazas de forma autónoma en segundos
Se integra activamente con la pila de seguridad
Apoya la intervención humana en la toma de decisiones
SEAMLESS INTEGRATION
Connecting to all apps, via API
Darktrace interacts directly with the SaaS vendor to understand activity within that cloud service.
DARKTRACE
DETECT
TM
/
Apps
ENTENDER LO NORMAL
Deployed passively.
Analyzing every user event.
Asking millions of questions.
Analyzing every user event.
Asking millions of questions.
Darktrace/Apps detects threats using AI algorithms that make millions of calculations from real-time data. By correlating subtle anomalies, Darktrace DETECT can distinguish sophisticated threats from benign activity in your SaaS applications.
All context considered, is the user's activity normal?
And issues the perfect counter response for the threat.
And issues the perfect counter response for the threat.
Puntos de datos sin procesar
Extracted directly from cloud applications
Login
Failed login
Resource viewed or modified
File uploaded
File downloaded
Resource created
. . .
Puntos de datos enriquecidos con Darktrace
Características de los datos mejoradas por las matemáticas y la IA
Is this actually this user?
Does this location match expectations?
Has this user changed their credentials?
Does the user usually log in from this device?
Is this time unusual for the user? The company?
Do any other users log in from this country?
. . .
Eventos comprensibles
Matemáticas complejas,
salida simple
salida simple
Darktrace DETECT emite alertas intuitivas y fáciles de entender, reduciendo el tiempo que tardan los equipos de seguridad en comprenderlas.
DETECT → MITRE
Mapeo Darktrace MITRE
Darktrace DETECT models are automatically mapped to the MITRE attacks & techniques within the user interface when activity is detected
See Darktrace DETECT/Apps in your own environment. Get a demo.
Ready for your collaboration
Scales to your business needs.
One-click integrations and rapid, remote deployment makes it easy for you to add and remove SaaS applications covered by Darktrace. The frequency of Darktrace’s queries can be adjusted in consideration of any other applications that may also use HTTPS requests.
One-click integrations and rapid, remote deployment makes it easy for you to add and remove SaaS applications covered by Darktrace. The frequency of Darktrace’s queries can be adjusted in consideration of any other applications that may also use HTTPS requests.
DARKTRACE
RESPOND
TM
/
Apps
Autonomous Response for SaaS
Todo es cuestión de precisión.
When a threat is detected with high confidence, Darktrace RESPOND/Apps takes action in near real time to stop an attacker or malicious insider in their tracks.
Darktrace RESPOND takes proportionate action to ensure the threat is neutralized in the least disruptive way possible.
Darktrace RESPOND takes proportionate action to ensure the threat is neutralized in the least disruptive way possible.
Darktrace RESPOND/Apps can take a range of actions, according to the nature of the threat.
No es necesario hacer nada
Bloquear conexiones específicas
Restrict a user from select applications
Restrict file sharing settings for certain folders
Logout user
End a user's active sessions
...
A deeper dive into RESPOND actions:
Bloquear conexiones específicas
Darktrace RESPOND/Apps identifies the specific, external connections attempting data exfiltration, and interrupts them. Benign connections are undisturbed.
Remove a user from select applications
Darktrace RESPOND/Apps can force a user logout only on selected applications where they appear to be compromised.
Restrict File Sharing Settings
In the event of a suspicious upload of data to an internet server, Darktrace RESPOND/Apps can temporarily restrict file sharing for specific files, folders, or users.
End User's Active Sessions
In cases of a high-confidence account takeover, Darktrace RESPOND/Apps will end a user's active sessions across all devices.
Totalmente configurable y personalizable
Darktrace RESPOND funciona dentro de los parámetros que usted le indique.
Only on certain devices? At certain times of day? In response to certain events?
You set the guide-rails. Then let the AI do the heavy lifting.
ENHANCE existing workflows
Integraciones con un solo clic
Darktrace/Apps integrates seamlessly with all
major cloud applications.
major cloud applications.
Explore /Apps integrations
Manténgase al día con la aplicación móvil de Darktrace
Full oversight of Darktrace RESPOND's actions is provided through Darktrace’s Threat Visualizer interface, and via the Darktrace
Mobile App.
Mobile App.
Descargar en:
Cyber AI Analyst
El Cyber AI Analyst de Darktrace investiga cada salida de Darktrace DETECT para revelar el incidente más amplio, dándole todos los detalles que necesita en un solo clic.
Combina la experiencia humana con la velocidad y la escala de la IA
AI Analyst se entrena con un conjunto de datos cada vez mayor de ciberanalistas expertos. Al observar y luego replicar su comportamiento, la tecnología piensa como un investigador humano: haciendo preguntas, probando hipótesis, llegando a conclusiones.
Corta el ruido
Como resultado, puede realizar el trabajo pesado en nombre de los equipos humanos, conectando los puntos entre docenas de eventos singulares y reduciéndolos a un puñado de incidentes de alta prioridad para la revisión humana.
Aumenta su equipo
AI Analyst reduce el tiempo de triaje en una media del 92%. Esto permite a su equipo de seguridad dedicar su tiempo a tareas estratégicas en lugar de a la lucha reactiva contra el fuego.
¿El resultado final?
Informes de incidentes generados por la IA que
cualquiera puede entender
cualquiera puede entender
Desde su tablero, hasta su más reciente iniciación.
Historias de clientes
%20copy.png)
