Safeguarding Companies with Threat Intelligence

0
625
Joep Gommers
Joep Gommers, CEO & Co-founder

EclecticIQ

 

With our TIP and Fusion Center, we have helped transform the security industry by bringing Threat Intelligence to the center of attention.”

The cyber threat landscape is growing at such a rapid speed that it is getting increasingly more difficult to keep up with the threat reality that organizations face. More practically, organizations realize that 100% protection is impossible: it would require extremely low detection thresholds, which would paralyze the communication ability of an organization. Despite higher detection thresholds, current SOCs (Security Operations Centers) are overloaded with false positives from the detection infrastructure. EclecticIQ was early to realize that a tool was needed that helps to put cyber threat intelligence at the core of security operations and help threat analysts to free up time to focus on the most relevant threats.

The Threat Intelligence Platform (TIP) from EclecticIQ enables organizations to align their defense tactics and strategies with the actual and future threat landscape. It creates business value for customers not only by processing data (i.e. IOCs/IOAs), thereby improving defenses and responses, but also by creating intelligence (i.e. context and forward-looking understanding) to anticipate threats, inform security investments, and define risk mitigation strategies. From a high-level feature perspective, the EclecticIQ Platform enables customers to seamlessly aggregate large volumes of heterogeneous intelligence and data from open-sources, commercial suppliers and industry partnerships.

It then processes the data through enrichment, curation and graph-based investigations, disseminates the resulting information into security controls (through native integrations) and to humans (through in-platform intelligence report editing).

EclecticIQ Platform is complemented by the company’s Fusion Center, which delivers thematic intelligence bundles providing customers with a curated single source of relevant cyber threat intelligence from leading suppliers, open sources and industry partnerships. Users receive a unified delivery of STIX-compatible intelligence that’s optimized for their organization. The intelligence is qualified, clustered and categorized, which allows customers to quickly apply their own priority and relevance.

According to Joep Gommers, CEO & Co-founder of EclecticIQ, the Cyber Threat Intelligence (CTI) sector is still fairly young. “With our Platform and Fusion Center, we are driving a transformation of the security industry to ensure organizations take ownership of their threat landscape,” adds the steadfast leader. “However, threats keep evolving and keeping up, cybersecurity strategies need to mature and focus on relevant and reliable CTI as a requirement to improve all security processes”. CTI enhances detection capabilities and lowers the false positives, thereby improving the overall effectiveness of SOCs. CTI not only makes Endpoint Detection & Response (EDR) and other security controls tools more efficient but is also the foundation of threat hunting. By leveraging threat hunting, organizations can analyze more advanced threats: leads that may indicate an attack as opposed to commonly known threats, therefore reducing the time to discovery and the damages they could cause.

“Intelligence Essentials, our fully fused multi-source threat intelligence bundle, curated by our in-house team of CTI analysts, are giving analyst precious time to focus on investigations,” adds Raymon van der Velde, Co-founder & VP Product of EclecticIQ. “Additionally, intelligence feeds from leading intelligence suppliers free up time for their analysts, receiving focused reports from a variety of intel data feeds focused on threats specific to their industry.”

Today, EclecticIQ has to establish themselves as a brand in Cyber Threat Intelligence (CTI), providing a Threat Intelligence Platform for early adopters such as central government and financials in Europe, North America and the Middle East. “As other sectors are reaching the maturity needed to apply CTI, we are moving our customer base into other industries and thereby increasing our market-leading position in those regions, plus increasing our customer base in the APACs,” adds Joep.