Threat Hunting
Framework

Highly Effective Monitoring Tool

• Detection of previously unknown threats based on Threat Intelligence & Attribution data. Proactive search for anomalies, hidden tunnels, and signs of communications with C&C servers.
• Automated correlation of events and alerts, and subsequent attribution to malware type and/or threat actor
• Global proactive threat hunting that exposes adversaries’ external infrastructure, TTPs, intent, and plans
• Proprietary tools – Network graph analysis and malware detonation platform provide data enrichment, correlations, and analysis
• Full overview of the attack, in-depth management of incidents (up to Mutex/Pipes/Registry/Files)

Detection of Attacker Infrastructure on a Global Scale

Technology conceived to collect a large amount of data and unique search algorithms designed to find connections and help detect infrastructure that hackers intend to use in future attacks

4.2 billion

IP addresses — daily scan of the entire IPv4 address range

211 million

domains and archived data from the past 17 years

145 million

SSH keys

1.6 billion

SSL-certificates