News, news analysis, and commentary on the latest trends in cybersecurity technology.

Mandiant Tackles Ransomware and Breaches With New Tools

Mandiant's new software-as-a-service offerings tap into the company's extensive threat intelligence capabilities to help cybersecurity teams detect and respond to ransomware attacks and data breaches.

Dark Reading Staff, Dark Reading

October 5, 2021

1 Min Read
A red hand against two padlocks.
Shutterstock

Mandiant announced two new Mandiant Advantage services to fight ransomware and data breaches during the annual Cyber Defense Summit. The new software-as-a-service offerings — Active Breach & Intel Monitoring and Ransomware Defense Validation — allow enterprise security teams to detect the presence of active Indicators of Compromise in their environments and test their defenses against ransomware attacks.

Active Breach & Intel Monitoring proactively monitors customer networks to identify the presence of IOCs based on insights drawn from Mandiant’s global incident response engagements and threat intelligence research. The service searches for IOCs to uncover active breaches as well as historical incidents. Mandiant evaluates the IOCs and prioritizes the alerts so that security teams can rapidly identify potential attacks and reduce the amount of time a threat actor has to cause damage.

Ransomware Defense Validation lets security teams test their critical security controls against prevalent ransomware and identify gaps that require immediate attention. Organizations can test their anti-ransomware defenses by tapping into the latest threat intelligence Mandiant has on active ransomware attackers and their tactics, techniques, and procedures. Security teams can find out what changes need to be made to their defenses to block or contain ransomware attacks.

Mandiant Advantage, unveiled last year, currently has four modules delivering automated defense, threat intelligence, security validation, and attack surface management. The modules for Active Breach & Intel Monitoring and Ransomware Defense Validation are expected to be generally available in January 2022.

Read more about Active Breach & Intel Monitoring and Ransomware Defense Validation here.

About the Author

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights