Overview

In this new era of hybrid work, visibility into user behavior and actions is critical to thwarting insider threats and mitigating preventable risks, especially as organizations grapple with inflation and mass layoffs driven by economic uncertainty.

First-generation UEBA solutions have developed useful models for analysis and alerting, but they rely solely on interpreting log files and Windows® events, which are flawed data sources for capturing user behavior. Log files are difficult to implement and manage, requiring a significant amount of manpower to configure, collect, maintain, and interpret. Plus, they don’t provide enough visibility to mitigate common user attacks before damage has occurred.

DTEX InTERCEPT™ is a first-of-its-kind Workforce Cyber Intelligence & Security solution bringing together next-gen DLP, UEBA, digital forensics, user activity monitoring and insider threat management in one scalable cloud-native platform. Unlike legacy UEBA solutions, DTEX doesn’t rely on any Operating System or external logs. Instead, user visibility is achieved by monitoring the actions of the user directly on the endpoint. This is accomplished by creating user-based metadata that includes detailed information that is not provided from external log sources and provides real-time detection capabilities to identify actionable risks – regardless of whether the user is on a corporate network. DTEX then enriches the datasets to augment, corroborate, or potentially replace the requirement for additional log collection, delivering the behavioral context and intelligence needed to escalate and remediate an event before malicious insiders attack or data exfiltration occurs.

Recent enhancements to DTEX InTERCEPT™ for Behavioral DLP, the industry’s first and only Zero Trust ‘People-Centric’ Endpoint DLP product, expand the scope and protection provided by multiple Microsoft 365 E5 modules to provide holistic behavioral data loss prevention and workforce activity intelligence capabilities across the entirety of an enterprise’s application, data, and operating system architecture.