Case Studies

9.8

CVE-2023-49733

Weaponized

Threats and Vulnerabilities

Threat actors

12

Wizard Spider, APT29, Conti, APT10, REvil, LAP$U, Lazarus Group, Equation Group...

21

FTP

2022-05-25 15:33:35

OpenSSH 2.0, Firewall, Linux, cpe:/a:openbsd:openssh:7.6p1

Cybersecurity

Threat Intelligence

Customer Impact: Replaces 50% of redundant internal security tools, resulting in reduced costs for customers.

Product

Threat and Risk Intelligence

Utilizing 620+mm IPs tracked and search so organizations stay secure against threats.

Challenge

3 Months

Deadline for the MVP release while learning the intricacies of threat intelligence.

Business Impact

10MM

Revenue as of Q1 2024. ..."fastest growing product line".

Suspicious IP:

111.118.51.12

Findings:

Suspicious Location

Outside Work hours

Anomalous Behavior

MITRE Pattern:

Reconnaissance - 89%

Privileged Escalation- 76%

Data Access- 76%

Recommended

identify accessed data

Show specific S3 object paths accessed via GetObject by user B_Wayne from suspicious IP 111.118.51.12.

111.118.51.12

Suspicious

API calls

GetObject

Cybersecurity

Native AI

AI Assistant

CONCEPT: A native AI Assistant partnering with security analysts and threat hunters through a full case investigation, from hypothesis to containment.

Product

Native AI

Assistant

Utilizing 620+mm IPs tracked and search so organizations stay secure against threats.

Challenge

1 Week

Deadline for the MVP release while learning the intricacies of threat intelligence.

Business Impact

80%

Revenue as of Q1 2024. ..."fastest growing product line".

Case Study

9.8

CVE-2023-49733

Weaponized

Threats and Vulnerabilities

Threat actors

12

Wizard Spider, APT29, Conti, APT10, REvil, LAP$U, Lazarus Group, Equation Group...

21

FTP

2022-05-25 15:33:35

OpenSSH 2.0, Firewall, Linux, cpe:/a:openbsd:openssh:7.6p1

Cybersecurity

Threat Intelligence

Customer Impact: Replaces 50% of redundant internal security tools, resulting in reduced costs for customers.

Product

Threat and Risk Intelligence

Utilizing 620+mm IPs tracked and search so organizations stay secure against threats.

Challenge

3 Months

Deadline for the MVP release while learning the intricacies of threat intelligence.

Business Impact

10MM

Revenue as of Q1 2024. ..."fastest
growing product line".

Case Study

Suspicious IP:

111.118.51.12

Findings:

Suspicious Location

Outside Work hours

Anomalous Behavior

MITRE Pattern:

Reconnaissance - 89%

Privileged Escalation- 76%

Data Access- 76%

Recommended

identify accessed data

Show specific S3 object paths accessed via GetObject by user B_Wayne from suspicious IP 111.118.51.12.

111.118.51.12

Suspicious

API calls

GetObject

Cybersecurity

Native AI

AI Assistant

CONCEPT: Native AI partnering with security analysts and threat hunters through a full case investigation, from hypothesis to containment.

Product

Native AI Assistant

Utilizing 620+mm IPs tracked and search so organizations stay secure against threats.

Challenge

1 Week

Deadline for the MVP release while learning the intricacies of threat intelligence.

Business Impact

80%

Reduction in MTTR (mean time to respond).
Zero-work-to-insight investigations.