Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Forensics to Respond to Incidents Fast and Affordable Automated incident response software allows for quick, thorough, and simple intrusion investigations. An alert is generated by SIEM or IDS. SOAR is used to initiate an endpoint investigation. Cyber Triage is used to collect data at the endpoint. Cyber Triage data is used by analysts to locate evidence and make decisions. The manual incident response process is slow and leaves the entire organization vulnerable to the intruder. Cyber Triage automates every step of the endpoint investigation process. This ensures high-quality remediation speed. Cyber threats change constantly, so manual incident response can be inconsistent or incomplete. Cyber Triage is always up-to-date with the latest threat intelligence and scours every corner of compromised endpoints. Cyber Triage's forensic tools can be confusing and lack features that are necessary to detect intrusions. Cyber Triage's intuitive interface makes it easy for junior staff to analyze data, and create reports.
Description
Upon launching CrossLink, users encounter the prompt “Know More,” which embodies the platform's guiding principle. This philosophy drives CrossLink's mission to empower individuals, whether they are SOC analysts, investigators, or incident responders, to effectively narrate a more comprehensive story about their data. With a few clicks, search results from six interconnected categories of network and actor-centric information deliver essential insights that can be easily compiled and disseminated within an organization. Developed by a team of seasoned analysts with extensive practical experience in threat investigation, CrossLink addresses significant gaps present in the existing marketplace. The data categories encompass an extraordinary variety of actor profiles, communication records, historical Internet registration data, IP reputation, digital currency transactions, and passive DNS telemetry, all of which facilitate rapid investigations into various actors and incidents. Additionally, CrossLink equips users with features to generate alerts and lightweight management options through shareable case folders, enhancing collaborative efforts across teams. Ultimately, CrossLink aims to streamline the investigative process and foster a deeper understanding of the digital landscape.
API Access
Has API
No
API Access
Has API
No
Integrations
Splunk Cloud Platform
Yes
Splunk SOAR
Yes
Anomali
No
Check Point CloudGuard
No
Cortex XSOAR
No
Elastic Security
Yes
IBM Cloud
Yes
IBM QRadar SIEM
Yes
Microsoft Defender for Endpoint
Yes
MineMeld
No
Integrations
Splunk Cloud Platform
Yes
Splunk SOAR
Yes
Anomali
Yes
Check Point CloudGuard
Yes
Cortex XSOAR
Yes
Elastic Security
No
IBM Cloud
No
IBM QRadar SIEM
No
Microsoft Defender for Endpoint
No
MineMeld
Yes
Pricing Details
$2,500
Free Trial
Yes
Free Version
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Sleuth Kit Labs
Founded
2023
Country
United States
Website
www.cybertriage.com
Vendor Details
Company Name
Qintel
Founded
2009
Country
United States
Website
www.qintel.com/products/crosslink/
Product Features
Incident Response
Attack Behavior Analytics
Yes
Automated Remediation
Yes
Compliance Reporting
Yes
Forensic Data Retention
Yes
Incident Alerting
Yes
Incident Database
Yes
Incident Logs
Yes
Incident Reporting
Yes
Privacy Breach Reporting
No
SIEM Data Ingestion / Correlation
Yes
SLA Tracking / Management
No
Security Orchestration
No
Threat Intelligence
Yes
Timeline Analysis
Yes
Workflow Automation
Yes
Workflow Management
Yes