ASPECT

Automation that powers our Managed Security Service to enhance your organisation's security posture at greater speed.

What is ASPECT?

Enabling accurate analysis faster than ever!

Automated Security Platform Enriching Cyber Threats (ASPECT), is an advanced platform that takes notifications from machine learning technologies and enriches them with other associated data such as threat intelligence, Indicators of Compromise (IOC) and other log data to surface anomalous, potentially malicious activity in its infancy.

How does it work?

It's as simple as collect, automate and act!

ASPECT utilises knowledge from subscription-based threat intelligence feeds as well as other sources to provide a reflection of known indicators against the observed activity within monitored estates and instantly builds up threat intelligence information against individual events within the timeline. It works in three simple steps:

1. Collect

We collect data from the monitored estate and identify alerts and anomalous activity.

2. Automate

The identified activity is enriched utilising threat data building a contextualised series of alerts.

3. Act

Our forensic analysts then make informed decisions based on the intelligence received.

Why did we create ASPECT?

To efficiently and effectively identify and route priority threats to forensic analysts.

By automating repetitive and time consuming analyst tasks whilst enriching alerts with internal and external threat data, we can provide greater context. ASPECT uses proprietary scoring logic to identify and escalate priority threats.

Powered by advanced technolgies

These powerful technologies help to automate repetitive and time consuming tasks for analysis whilst also enriching the data to provide greater context.

Darktrace

Behavioural analytics across the network with powerful visualisations and remediation. Learn more about Darktrace here.

Exabeam

Behavioural analytics across User and Entities (endpoints) providing an autonomous compilation of chronological timelines and anomaly identification. Learn more about Exabeam here.

Chronicle

Unlimited security log ingestion with retrospective threat lookups and threat hunting capabilities at the speed of search. Learn more about Chronicle here.