Cyber Triage

Cyber Triage is an automated software solution designed to assist cybersecurity professionals in quickly addressing intrusion queries related to malware, ransomware, and account takeover. According to the vendor, it is suitable for organizations of all sizes, including small businesses, mid-sized companies, and large enterprises. It is utilized by professionals in various industries, such as Cybersecurity Professionals, Incident Response Teams, Digital Forensic Investigators, Security Operations Centers (SOCs), and Managed Security Service Providers (MSSPs).

Key Features

Artifact Collection: Cyber Triage enables efficient and swift collection of crucial artifacts, including volatile data, malware persistence mechanisms, and user activity, ensuring comprehensive investigations.

Malware Scanning: Cyber Triage utilizes advanced malware scanning with over 40 engines, employing heuristics and importing IOC threat intelligence lists to enhance its scanning capabilities.

Comprehensive Artifact Scoring: Cyber Triage assigns threat scores to collected artifacts, facilitating rapid prioritization and differentiation between malicious, suspicious, and benign items. It also integrates with threat intelligence for contextual analysis.

Integration with SIEM and SOAR: Cyber Triage seamlessly integrates with SIEM and SOAR systems, allowing for triggered artifact collections in response to alerts. Its REST API enables easy integration with enterprise tools, promoting efficient collaboration and data retrieval.

Team Collaboration and Reporting: Cyber Triage supports collaborative efforts, enabling multiple investigators to work simultaneously on the same incident. It generates detailed HTML or JSON reports that can be easily shared with team members, managers, or clients.

Flexible Deployment Options: Cyber Triage offers flexible deployment options, including on-premise, cloud, and remote environments. It can run on laptops, in the cloud, or on on-premise servers, accommodating various operational needs.

Ransomware Investigation: Cyber Triage focuses on simplifying ransomware investigations by identifying attack entry points, persistence mechanisms, encrypted databases, lateral movement, and malicious programs, providing valuable insights for effective response.