New partnership aims to improve threat detection

The problem with many security solutions is that the number of alerts they generate leads to a good deal of time in investigations, some of which will turn out to be false positives.

Real-time analytics company Corvil is partnering with endpoint security specialist Carbon Black to offer customers unified cyber threat detection, analysis, and response.

The combined solution provides visibility and context, allowing security teams to seamlessly track and correlate activity across their networks and endpoints. This enhanced visibility helps security teams accelerate detection times and streamline forensic investigations. This means faster response to both internal and external attacks, as well as reduced alert fatigue.

By linking Carbon Black's endpoint data with Corvil's full-fidelity, retrospective packet capture, the unified solution enables security teams to answer critical questions like, how long have the attackers been in our network? What sensitive data and credentials have been exfiltrated? And which command-and-control servers are communicating with our compromised systems?

"Many companies, including the world's leading financial services firms, rely on Corvil’s real-time technology to safeguard their critical businesses," says Tom Barsi, senior vice president of business development for Carbon Black. "This integration enables customers to extend the visibility and protections of Corvil's network-based Security Analytics to the endpoint with Carbon Black. By integrating our similar capabilities across network and endpoint, security teams have a more powerful and flexible solution at their disposal to detect and combat a broad array of internal and external cyber threats".

You can find more information on the combined solution on the Corvil website.

Image Credit: underverse /Shutterstock