Intezer and Mindflow have partnered to enable users to automate their incident management and better protect their information systems.

Intezer Overview

Intezer is a platform providing for threat hunting, triage, and incident response. To that end, the solution relies on extensive mapping of known threat actors and malware families.

It then combines its knowledge and automated files, URLs, and endpoint analysis to detect, classify and prioritize alerts. By doing this, Intezer also helps to drastically reduce the percentage of false positives usually detected by other tools.

Classification and prioritization are achieved by automatically extracting artifacts and looking for IoCs from the analyzed files and URLs.

Artifacts are then stored for knowledge retention and future analysis between incidents.

By focusing on automation of known processes, the platform easily integrates into SecOps workflows to eliminate most false positives and reduce alert response time.

Benefits

• Analyze files, URLs, and machines automatically to classify and prioritize threats
• Reduce MTTR by automating the extraction and detection of IoCs
• Track threats from a proprietary feed of more than ten thousands mapped threat actors and malware families
• Full retention of artifacts to enable teams to make connections between incidents