DeepSight? Adversary Intelligence

Timely, context-rich, and relevant cyber threat intelligence

DeepSight Managed Adversary and Threat Intelligence (MATI) helps you to:

• Get a better understanding of your threat environment, including cyber espionage, cyber crime, and hacktivist threats
• Learn how to defend your organization against them by understanding the actors and groups behind the attacks, their motivations, exploited vulnerabilities, and malware utilized

The DeepSight Intelligence team analyzes and verifies thousands of indicators of compromise to create actionable, context-rich threat intelligence that is relevant to you.

Answers to your unique cyber security questions

Ask your unique questions directly to our intelligence team. DeepSight Directed Threat Research (DTR) takes adversary intelligence one step further by providing tailored cyber threat intelligence reports built just for you. Common questions may include:

• "Do you have more information regarding the recent breach in the media? We may have been targeted too."
• "Can you keep us informed regarding activity related to a hacktivist campaign?"
• "We have an upcoming high-risk online meeting, what threats should we be aware of?"
• "What indicators are associated with a cyber espionage group?"

Adversary intelligence enables teams to take action

Threat Intelligence teams get visibility and can more quickly assess threats targeting your organization, industry, and geography. Save time, budget, and resources by focusing on the critical emerging threats and more quickly implement proactive controls and countermeasures.

Incident Response teams can assess the severity and scope of an incident for faster containment and remediation. Rich adversary intelligence provides the context of a threat and enables Response teams to see the bigger picture of the incident including

• Attribution to a threat actor or group
• Identification of known indicators
• The tools and techniques used
• Potential attacker motivations

The way your organization utilizes threat intelligence is unique and requires flexibility. DeepSight adversary intelligence is available via our customizable DeepSight Portal and DeepSight API:

DeepSight Intelligence Portal: a customizable cloud-hosted web portal that provides users with access to the DeepSight adversary and technical intelligence. Available in Standard, Enterprise, and Advanced Enterprise service levels and various contract lengths. Note that Directed Threat Research is available as an add-on option only to Advanced Enterprise customers. See the chart below for additional information.

DeepSight API: automates and enables technologies such as SIEM, GRC systems, DNS sinkholes, and smart firewalls to query the DeepSight research knowledgebase of adversary intelligence, network reputation and file reputation datafeeds. Note that access to Directed Threat Research is only available through the DeepSight Portal. See the chart below for additional information.