Brief Overview

CyCraft’s AIR platform automates SOC operations, forensics, detection and response operations for CyCraft’s Fortune Global 500 and national government clients, performing managed detection and response, incident response, threat hunting and accurate remediation. AIR platform collects endpoint evidence with Xensor, conducts automated correlation and behavior analysis across all evidence with CyCarrier, and validates threats and relates global threat intelligence via CyberTotal.

● XENSOR – NEXT-GENERATION MDR ENDPOINT SECURITY SYSTEM
Combining machine learning with unique forensic telemetry technology, Xensor provides highly efficient automated threat hunting and triaging. Using UEBA, program memory forensics, endpoint computer forensics, and network traffic analysis allows this platform to expediently respond to threats and reduce security costs.

● CYCARRIER – AI-DRIVEN SECURITY OPERATIONS CENTER
With the CyCarrier platform, CyCraft has created a hybrid solution that combines the company’s patented AI analyst with teams of skilled security experts, providing continuous security analysis.

Using the full endpoint dataset as an integrated unit allows MSSP/SOC teams to execute remote forensics with cockpit-style visualizations and controls. This makes it easy and efficient to ascertain security threats within the enterprise, and to automatically analyze case situations within an innovative AI and evidence-based environment. CyCarrier has contextual inference capabilities that can automatically generate malware association maps (file comparisons), program behavior association diagrams (call graphs), attack context charts (lateral movement) and intrusion case timing diagrams (storylines), to elevate MSSPs/SOCs to the next level.

● CYBERTOTAL – GLOBAL THREAT INTELLIGENCE PLATFORM
CyCraft’s Cyber Intel team has extensively tracked various forms of intrusion, provided historical information on APT groups, and brought together various global threat intelligence information sources into one user-friendly, scalable platform. The company channels these sources of high-quality threat intel into helping companies identify, verify and respond to threats immediately through AI automated correlation analysis and knowledge base optimization.