Intezer Features

Orchestration (8)

Asset Management: Lets users group and organize their endpoints to gather threat intelligence on specific technologies.
Security Workflow Automation: Reduces the need for IT and security professionals to iterate repetitive tasks associated with gathering threat information.
Deployment: The process in which users integrate their existing security systems and endpoints to the threat intelligence platform.
Sandboxing: A feature that allows security testing and information gathering to occur in a secure, resource independent environment.
Security Orchestration: Integrates additional security tools to automate security and incident response processes.
Data Collection: Collects information from multiple sources to cross reference and build contextual to correlate intelligence.
Threat Intelligence: Stores information related to common threats and how to resolve them once incidents occur.
Data Visualization: Offer pre-built and custom reporting and dashboards for quick insights into system states.

Proactive Alerts: Prior to security incidents, the product will alert users when a new, relevant vulnerability or threat is discovered.
Malware Detection: Provides multiple techniques and information sources to alert users of malware occurrences.
Intelligence Reports: The ability for users to produce reports outlining detailed and personalized threat information

Endpoint Intelligence: Analysis for users to examine threat intelligence data specific to their endpoint devices.
Security Validation: The product has a recurring examination process to update your intelligence reports as new threats emerge.
Dynamic/Code Analysis: The ability to examine your application, website, or database's code to uncover zero-day vulnerabilities.

Resolution Automation: Diagnose and resolve incidents without the need for human interaction.
Resolution Guidance: Guide users through the resolution process and give specific instructions to remedy individual occurrences.
System Isolation: Cuts off network connection or temporarily inactivate applications until incidents are remedied.
Threat Intelligence: Gathers information related to threats in order to gain further information on remedies.
Alerting: Clearly notifies users with relevant information and anomalies in a timely manner.
Performance Baselin: Sets a standard performance baseline by which to compare log activity.
High Availability/Disaster Recovery: Allows platform to scale to size of desired environment and configured with high availability and disaster recovery capabilities.
Response Automation: Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Malware Removal: Facilitates the remediation of network, endpoint, and application malware malware.
Data Protection: Protects informatin stored on premises and in the cloud. Prompts additional authentication for suspicious users.

Malware Evaluation: Tools to test an object to see whether or not it qualifies as malware.
Automatic Submission: The ability for a system to evaluate objects and automatically submit them to the sandbox.
Automatic Evaluation: The ability for a system to evaluate objects within the sandbax and assign a malware probability score.
Malware Probability Scores: The ability to assign objects a score based on their probability of being malware.

Workflow Automation: Streamline the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.
Automated Remediation: Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Log Monitoring: Constantly monitors logs to detect anomalies in real time.

Malware Detection: Provides multiple techniques and information sources to alert users of malware occurrences.
Compliance Monitoring: Monitors data quality and send alerts based on violations or misuse.
Threat Alerting: Identifies and alerts administrators of threats, issues, incidents and requests related to SaaS applications.

Malware Evaluation: Tools to test an object to see whether or not it qualifies as malware.
Sandboxing: Provides a resource-isolated environment to examine malware and evaluate objects against a database of known threats.
Threat Intelligence: Stores information related to common threats and how to resolve them once incidents occur.
File Analysis: Analyze file contents to identify malware components or unknown and advanced threats.

24/7 support: Provides 24/7 support to customers with technical questions.
Proactive report alerts: Proactively sends reports or alerts to customers.
Application control: Lets users detect and block applications that are not a security threat.
Proactive threat hunting: Proactively hunts threats.
Rapid response time: Provides rapid reponse time to cyber threats.
Customizeable reports: Provides the ability to customize reports.
Managed Services: Offers MDR as a service.

AI Text Summarization: Condenses long documents or text into a brief summary.
AI Text Summarization: Condenses long documents or text into a brief summary.
Generate Attack Scenarios: Use AI to propose possible threat actor tactics, techniques, and procedures against specific environments or assets.
Generate Threat Detection Rules: Use AI to automatically create detection rules based on observed patterns.
Generate Threat Summaries: Use AI to produce concise summaries of complex threat reports or alerts.
AI Text Generation: Allows users to generate text based on a text prompt.
AI Text Summarization: Condenses long documents or text into a brief summary.