Overview

Back in 2011, we created a certified computer emergency response service, united by a mission: to immediately contain cyber threats, regardless of when and where they take place and who is involved.
In this regard, Group-IB Threat Hunting Framework operates as a single system for managing detection infrastructure, automated analysis, event and alert storage, and retrospective incident analysis. It helps CERT-GIB manage incidents effectively and efficiently, gives analysts access to an extensive database of events, and reduces the time spent on incident analysis thanks to automatic grouping and correlation.
For its part, Group-IB Digital Risk Protection uses artificial intelligence technologies to detect the illegitimate use of logos, trademarks, content, and design layouts. Group-IB Digital Risk Protection automatically monitors millions of online resources where the customer’s brand or intellectual property may be present 24/7/365. Collected data includes screenshots, images, html files, redirect chains, traffic sources, and domain-related parameters.
Once violations are determined, every effort is made to eliminate them. Group-IB’s solution implements a comprehensive takedown procedure that has resulted in an 85% takedown rate pre-trial (20,000 violations a day). Again, the combination of automation and human expertise results in the fastest possible response time and makes Group-IB’s solution reliable.
Group-IB DRP implements a three-stage takedown process to maximize the chances of violations being eliminated.
1. Notification
Our team identifies the resource owner and requests them to remove the detected violation.
2. Enforcement
Group-IB leverages its global network of partnerships with domain registrars, hosting providers, social media admins, and CERTs to enforce the removal of the violation.
3. Cease and desist
Our team obtains official pre-trial orders for the detected violation to be taken down.