lorem ipsum dolor sit
Proud to be
called the hardest
working tech
PR agency
lorem ipsum dolor sit
100% of our tech
clients have
come via
recommendation
lorem ipsum dolor sit
Technology PR is
our specialism,
driving your
business is our goal
lorem ipsum dolor sit
Technology PR is
our specialism,
driving your
business is our goal

Client news

Rapid7

Rapid7 Attacker Behavior Analytics Brings Together Machine Learning and Human Security Expertise

InsightIDR is now the only SIEM providing User Behavior Analytics, Endpoint Detection and Response, and Attacker Behavior Analytics

Boston, MA – APRIL 17, 2018 Rapid7, Inc. (NASDAQ: RPD), powering SecOps through its visibility, analytics and automation cloud, today announced a new capability, Attacker Behavior Analytics (ABA), in its InsightIDR solution. Attacker Behavior Analytics are detections that reveal unknown variants of successful attacker techniques, and are continually crafted by Rapid7’s global security analysts and threat intelligence teams. With ABA, InsightIDR customers directly benefit from this stream of intelligence from Rapid7 SOCs, resulting in earlier attack chain detection and faster possible response to evolving attacks. 

“In order for a modern SIEM to be trusted as the heart of an incident detection program, it needs to collect and centralize the right data, apply the right analytics, and explain why the output is meaningful,” says Rebekah Brown, Threat Intelligence Leader at Rapid7. “Technology is a great start, but security still requires a persistent focus on human adversaries. Attacker Behavior Analytics allows our security analysts and threat intel teams to share what we are seeing on the frontlines automatically with all of our InsightIDR customers. Organizational blue teams don’t just want defense-in-depth, but expect agile detection engineering and guidance around adversary intent, capability, and opportunity. Now that our SOCs can directly contribute to InsightIDR, if we identify a novel attacker technique, we can push out a new detection to be automatically matched against customer data in hours.” 

With the addition of ABA, all InsightIDR customers will automatically receive high-fidelity alerts on evolving attacker behaviors built from thousands of incident investigations, including the use of fileless malware, cryptojacking, and spear phishing. When these malicious techniques are identified, alerts highlight notable behavior from the affected user and asset, making it significantly easier for security teams to respond quickly and with confidence. 

Rapid7’s SIEM, InsightIDR, recognized as a Visionary in Gartner’s 2017 Magic Quadrant for Security Information and Event Management, is one of the company’s analytic and automation cloud solutions used by teams around the world to power the internal practice of SecOps. InsightIDR provides centralized log management, threat detection rules and correlations, user behavior analytics, machine learning, compliance dashboards, and integrates easily into existing workflows. With the addition of Attacker Behavior Analytics, InsightIDR is the only SIEM solution that combines machine learning and ongoing human input to surface attacks as early as possible, and provide critical context about both the user and adversary in order to accelerate incident response. 

Sign up for a free trial of InsightIDR: https://www.rapid7.com/try/insightidr/  

About Rapid7

Rapid7 (NASDAQ:RPD) powers the practice of SecOps by delivering shared visibility, analytics, and automation that unites security, IT, and DevOps teams. The Rapid7 Insight platform empowers these teams to jointly manage and reduce risk, detect and contain attackers, and analyze and optimize operations. Rapid7 technology, services, and research drive vulnerability management, application security, incident detection and response, and log management for more than 7,000 organizations across more than 120 countries, including 52% of the Fortune 100.

Press contact:
Caitlin Doherty
Rapid7, Communications Program Lead
press@rapid7.com
(857) 990-4240 

Investors:
Jeff Bray, CFA
Rapid7, Vice President, Investor Relations
investors@rapid7.com
(857) 990-4074

"As a result of their proactivity, great ideas and tenacious approach, Origin Comms has been able to make a real difference in a short amount of time. "

Emilie Euesden

UK Marketing Manager

Snow Software

"The Origin team are a core part of our extended group. We trust them implicitly to help drive our PR efforts."

Gavin Bradbury

SVP Global Marketing

NTT Com Security

"The only PR agency with whom I have worked, where the client struggles to keep up with the opportunities Origin finds for them."

Nicholas Banks

VP Sales EMEA and APAC

Imation Mobile

"Origin Comms has worked with NTT Com Security for many years now. We always appreciate their accessibility, professionalism and flexibility."

Ann Hennerfors

Marketing Director

NTT Com Security