This year’s Black Hat Europe showcased the latest advancements in research, developments and emerging trends in cybersecurity. Being surrounded by all of the innovative technologies and expert insights that are shaping the future of the cybersecurity landscape is what made Auguria, Inc., a pioneer in AI-powered security operations solutions, decide that Black Hat Europe was the perfect venue to announce the newest version of its Security Knowledge Layer™ Platform.
The freshly enhanced platform can now integrate with some of today’s biggest data sources, including CrowdStrike, SentinelOne, Microsoft Windows Event Logs, and Palo Alto Networks.
Auguria also unveiled its Explainability Graph feature, which is a trailblazing tool that provides visual, context-rich threat data for security teams.
Breaking Down the Expanded Integrations
Across various platforms, security teams process an average of 78 trillion signals per day. This approach complicates the process of analyzing the data and identifying potential threats. This is where Auguria’s expanded platform comes in. Auguria now integrates seamlessly with the below key data sources, enabling organizations to harness richer insights and operational efficiencies:
•CrowdStrike: Auguria now supports CrowdStrike
Falcon® platform’s EDR data, providing AI-driven prioritization and actionable intelligence for quicker, more accurate incident response.
•Microsoft Windows Event Logs: Often overwhelming in volume, Windows Event Logs are transformed into actionable insights, with Auguria enriching data, filtering out noise, and surfacing critical events for review.
•Palo Alto Networks: The integration brings world-class firewall and network telemetry into Auguria’s Security Knowledge Layer™, enriching Palo Alto Networks data with noise reduction, contextual intelligence, and prioritization for faster incident investigations.
•SentinelOne: With SentinelOne Singularity™ platform’s industry-leading endpoint detection and response (EDR) and threat telemetry, Auguria users gain data compaction, advanced enrichment, and alert correlation, resulting in alert fatigue reduction and enhanced SecOps efficiency.
These integrations allow SecOps teams to consolidate, prioritize, and analyze data from multiple sources within Auguria’s platform, simplifying processes and facilitating faster, smarter security decisions.
An Introduction to Auguria’s Explainability Graph
Auguria’s Explainability Graph is an innovative feature that visualizes threat data, offering security teams an intuitive and contextual map of anomalous activity. It delivers a detailed yet easily digestible representation of suspicious or anomalous activity, helping teams to:
•Act with Confidence: Gain actionable insights to swiftly mitigate emerging threats.
•Identify Root Causes: Understand the “why” behind unusual behavior or threats.
•Uncover Connections: Identify the underlying relationships between seemingly isolated events.
With the launch of the Explainability Graph, Auguria showcases its data science expertise by seamlessly integrating and correlating millions of streaming log events. This results in security teams staying ahead of increasingly sophisticated threats with minimal friction.
The latest additions to the Auguria platform offer numerous advantages for SecOps teams. These benefits include:
•Cost Efficiency: Lower SIEM and data storage costs by intelligently managing less-critical telemetry.
•Customizable Outputs: Export enriched data to XDR, SIEM, or other security tools seamlessly.
•Noise-free Insights: Automatically filter up to 99% of non-actionable data.
•Faster Investigations: Enriched, prioritized data accelerates response times.
•Proactive Threat Hunting: AI-driven detection of anomalies and high-risk behaviors.
