ExtraHop adds new threat hunting and network advisory services to Reveal(x) 360 NDR

Image: Shutterstock/Dragon Images

ExtraHop announced Tuesday expanded Reveal(x) Advisor services to see menace detection and menace hunting services arsenic good arsenic web assurance analysis. In beta mode earlier this year, the work is present disposable to each customers.

Reveal(x) Advisor is not a basal unsocial service. It works alongside ExtraHop's Reveal(x) 360, the company's SaaS-based web detection and effect offering. Reveal(x) Advisor provides customers entree to ExtraHop's menace and information analysts to assistance them uncover indicators of suspicious web enactment that could bespeak a information breach. 

SEE: Security incidental effect policy (TechRepublic Premium)

"Reveal(x) Advisor experts assistance customers place imaginable weaknesses successful their situation to continuously support it updated and compliant," Mark Bowling, ExtraHop's vice president of Security Response Services, said successful an email. "When it comes to web assurance, this includes automatic find and classification of each assets connected the network, including unmanaged devices similar endeavor IoT, aesculapian IoT, and concern operational technology. Not lone does Reveal(x) 360 spot the devices, it besides ... helps place devices that request to beryllium patched rapidly successful the lawsuit of a CVE." 

The caller services are meant to augment existing cybersecurity teams, Bowling said, which are often overworked and short-staffed owed to a deficiency of qualified talent. According to the Ponemon Institute, 60% of breached organizations recovered the basal origin to beryllium a known vulnerability with an disposable spot that was not applied.

"The sophistication of attacks combined with fierce contention for information endowment has convinced galore organizations to crook to nonrecreational and managed services," Christina Richmond, programme vice president for Security Services astatine IDC, said successful a property release.

SEE: 20 bully habits web administrators need--and 10 habits to interruption (free PDF) (TechRepublic)

According to a 2021 cybersecurity staffing report from Information Systems Security Association (ISSA) and manufacture expert steadfast Enterprise Strategy Group (ESG), "The cybersecurity skills situation continues connected a downward, multi-year inclination of atrocious to worse and has impacted much than fractional (57%) of organizations ... The apical ramifications of the skills shortage see an expanding workload for the cybersecurity squad (62%), unfilled unfastened occupation requisitions (38%), and precocious burnout among unit (38%)."

"There are galore dimensions to the endowment shortage," Bowling said. "It's not conscionable the situation of hiring talent, it's besides the situation of retaining it. Security is simply a high-stress, high-pressure job. For organizations with little information maturity, oregon successful industries that can't wage a premium for talent, it's hard to enlistee and retain. The retention contented is particularly impactful erstwhile it comes to information posture."

Delivered arsenic a managed service, the caller Reveal(x) Advisor services include:

• Proactive investigation and reappraisal of captious assets to place known vulnerabilities, SSL hygiene, vulnerability risks, unauthorized devices, shadiness applications and anomalous web behavior 

• On-demand entree to Extrahop information advisors

• Proactive menace hunting based connected the MITRE ATT&CK model to hunt and research the network, strategy alerts and transmission information to place suspicious enactment and actions

Also spot

• How to go a cybersecurity pro: A cheat sheet (TechRepublic)
• Security threats connected the horizon: What IT pro's request to cognize (free PDF) (TechRepublic)
• Checklist: Securing integer information (TechRepublic Premium)
• Cybersecurity and cyberwar: More must-read coverage (TechRepublic connected Flipboard)