Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Forensics to Respond to Incidents Fast and Affordable Automated incident response software allows for quick, thorough, and simple intrusion investigations. An alert is generated by SIEM or IDS. SOAR is used to initiate an endpoint investigation. Cyber Triage is used to collect data at the endpoint. Cyber Triage data is used by analysts to locate evidence and make decisions. The manual incident response process is slow and leaves the entire organization vulnerable to the intruder. Cyber Triage automates every step of the endpoint investigation process. This ensures high-quality remediation speed. Cyber threats change constantly, so manual incident response can be inconsistent or incomplete. Cyber Triage is always up-to-date with the latest threat intelligence and scours every corner of compromised endpoints. Cyber Triage's forensic tools can be confusing and lack features that are necessary to detect intrusions. Cyber Triage's intuitive interface makes it easy for junior staff to analyze data, and create reports.

Description

IP Threat Intel offers instantaneous threat intelligence that aids security teams in minimizing alert fatigue and expediting triage processes within TIPs, SIEM, and SOAR platforms. It can be utilized as an API integrated into your existing systems or as a robust local database tailored for intensive on-premise operations. This feed delivers comprehensive data on IP addresses noted within the last month, detailing the specific ports that have been targeted by each address. With updates occurring every hour, it remains aligned with the evolving threat landscape. Each IP entry not only provides insights into the event volume from the past 30 days but also indicates the latest detection made by ELLIO's deception network. Additionally, it presents a complete list of all IP addresses identified today, with each entry featuring tags and comments that provide context regarding the targeted regions, volume of connections, and the most recent sighting by ELLIO's deception network. With updates every five minutes, this service guarantees that you have access to the latest information, which is crucial for effective investigation and incident response, helping to enhance your overall security posture.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Elastic Security Yes 
IBM Cloud Yes 
IBM QRadar SIEM Yes 
JSON No 
Logstash No 
Microsoft Defender for Endpoint Yes 
SentinelOne Singularity Yes 
Splunk Cloud Platform Yes 
Splunk SOAR Yes 
Swimlane Yes 

Integrations

Elastic Security No 
IBM Cloud No 
IBM QRadar SIEM No 
JSON Yes 
Logstash Yes 
Microsoft Defender for Endpoint No 
SentinelOne Singularity No 
Splunk Cloud Platform No 
Splunk SOAR No 
Swimlane No 

Pricing Details

$2,500
Free Trial Yes 
Free Version Yes 

Pricing Details

$1.495 per month
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

Sleuth Kit Labs

Founded

2023

Country

United States

Website

www.cybertriage.com

Vendor Details

Company Name

ELLIO

Country

Czech Republic

Website

ellio.tech/ellio-ip-threat-intel

Product Features

Incident Response

Attack Behavior Analytics Yes 
Automated Remediation Yes 
Compliance Reporting Yes 
Forensic Data Retention Yes 
Incident Alerting Yes 
Incident Database Yes 
Incident Logs Yes 
Incident Reporting Yes 
Privacy Breach Reporting No 
SIEM Data Ingestion / Correlation Yes 
SLA Tracking / Management No 
Security Orchestration No 
Threat Intelligence Yes 
Timeline Analysis Yes 
Workflow Automation Yes 
Workflow Management Yes 

Alternatives

Binalyze AIR Reviews

Binalyze AIR

Binalyze

Alternatives

Darkfeed Reviews

Darkfeed

Cybersixgill
Falcon Forensics Reviews

Falcon Forensics

CrowdStrike
Cado Reviews

Cado

Cado Security