EMET custom malicious user journey analytics powered by Reveal Security

Product Overview

EMET malicious user journey analytics powered by Reveal Security is a leading security analytics tool that uses user journey analytics to detect malicious activity for Cloud Apps.This is the "custom-application edition" of the product, supporting Custom-Built (such as customer portal, supplier portal etc) apps.The solution provides the following benefits:User Journey Analytics: User Journey Analytics is based on the analysis of activity sequences performed while using an application, in contrast with UEBA, which analyzes each activity individually and then builds a timeline. The sequence provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. Higher quality alerts mean security analysts reduce wasted time on false positives and alert for cases other products fail to notice.Multiple Journey Profiles per User: Leveraging RevealSecurity's patented clustering engine - tailored for clustering user journeys - TrackerIQ automatically learns multiple journey profiles across applications. Detecting anomalous journeys by comparing users to themselves and their peers provides an extremely high signal-to-noise ratio.Application Layer Detection and Response: TrackerIQ complements XDR solutions at the business application layer to detect threats and fraud. Existing detection solutions are focused on the infrastructure layers and on access to business applications, resulting in very limited effectiveness against malicious insiders as well as external attackers who succeed to bypass authentication mechanisms.Application Agnostic Detection: The detection model is applied to any SaaS or custom-built application, analyzing user journeys in and across applications to detect anomalies. This model eliminates the need to understand business application logic and no rules are required.For Splunk customers, TrackerIQ connects natively to Splunk, offering simpler, streamlined deployment. EMET's Splunk experts will assist Splunk customers to configure and connect their Splunk and TrackerIQ deployments for an easy deployment experience.The product pricing includes up to 1 million log records processed per month. For more than 1 million log records processed per month, please ask for a private pricing proposal.
Version: EMET-TrackerIQ-V2.0-Custom
By
E&M Computing Ltd

Categories: Security
Anomaly Detection-Structured
Data Analytics

Operating System
Linux/Unix, Amazon Linux 2
Delivery Methods
Amazon Machine Image

Highlights: Application User Journey Analytics - User Journey Analytics is based on the analysis of activity sequences performed while using an application, in contrast with UEBA, which analyzes each activity on its own and then builds a timeline. The sequence provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. Higher quality alerts means security analysts reduce wasted time on false positives and alert on previously undetected cases. Multiple Journey Profiles per User - Leveraging RevealSecurity's patented clustering engine - tailored for clustering user journeys - TrackerIQ automatically learns multiple journey profiles per user across applications. Detecting anomalous journeys by comparing users to themselves and their peers provides an extremely high signal-to-noise ratio. Application Layer Detection and Response - TrackerIQ complements XDR solutions at the business application layer to detect threats and fraud. Existing detection solutions are focused on the infrastructure layers and on access to business applications, resulting in very limited effectiveness against malicious insiders as well as external attackers who succeed to bypass authentication mechanisms.

Category: Infrastructure Software

Delivery Method: Amazon Machine Image