Lastline Breach Defender™ is the only breach protection system that provides a dynamic blueprint of a network breach as it unfolds. This blueprint provides your security teams with complete breach visibility, displaying movement of the attack across your network.
This innovative network threat protection system enables you to quickly understand the scope of the threat, including compromised systems, communication between local and external systems, and data sets accessed.
Lastline Breach Defender builds this dynamic blueprint by combining three critical aspects of network security: Data Collection, Breach Analytics, and Breach Response.
Lastline Breach Defender collects relevant data from across your network using Lastline Sensors for network-based malware detection and Lastline Analysis Nodes to analyze network activity related to breaches. Your existing network threat protection and security controls can also submit unknown files and content to Lastline Breach Defender for analysis, making those controls more effective. In addition, Lastline Breach Defender supplements the data collected in your network with threat intelligence from the Lastline Global Threat Intelligence Network.
The foundation of Lastline Breach Defender is Deep Content Inspection™, our network-based malware detection technology. Deep Content Inspection is the highest-rated malware detection on the market because of its ability to interact with the malware and create an inventory of every malicious behavior built into the malware.
Deep Content Inspection interacts with the malware and catalogs every action the malware can take. No other sandbox technology can deconstruct the malware as completely as Deep Content Inspection. It is this comprehensive visibility into the malware’s capabilities that sets Deep Content Inspection apart, and makes Breach Defender unique.
In addition, it detects the advanced malware engineered to evade sandboxes, NGFWs, and other “next-gen” tools. Sophisticated evasion techniques can easily fool technologies that rely on alternative methods to malware detection, like OS emulation and virtualization. Those technologies cannot interact with the malware and therefore miss many advanced attacks.
Deep Content Inspection analyzes email, web, and network traffic to provide full attack chain visibility. With this insight, you can quickly understand the nature of the attack, making scarce security resources more efficient.
Lastline Breach Defender further improves breach protection by continuously monitoring your network activity to detect the signs of malicious behavior as a network breach unfolds. The data collected includes low-level events and seemingly benign activity that would otherwise go unnoticed. This network-wide monitoring also facilitates hunting of latent threats residing in your network from file downloads, website content, and email attachments.
Lastline Breach Defender also augments the data it collects by incorporating global context for malicious activity detected locally on your network. This global insight enables you to understand how activity on your network relates to activity detected across Lastline’s global customer base, including all other malware detected by Lastline customers that reference IOCs discovered in your network. You can also configure proactive notifications for whenever malware detected across Lastline customers targets specific IOCs or company assets (such as domains or IP addresses).
Collect security data from your third-party products to supplement the data collected by Lastline Breach Defender. You can either submit data using our diverse Technology Alliance Partners’ products, or quickly configure data sharing via our robust APIs. Our Technology Alliance Partners have built-in integrations and are ready for you to deploy.
Lastline Breach Defender correlates the collected data and applies advanced analytics to
generate additional insight into malicious activity in your network.
Lastline Breach Defender applies Machine Learning and AI techniques to tie collected data together and identify relationships among seemingly unrelated aspects of the breach activity, including additional IOCs not previously associated with the malware, suspicious files and unusual behavior of systems, services, and applications.
It correlates the information generated from the data collection process to link disparate behaviors together, spotting elements of a network breach that you otherwise would have missed with limited security staffing and narrowly focused security controls.
Lastline Breach Defender uses the information collected from across your network and applies sophisticated analytics to generate a dynamic blueprint of the breach activity in your network. The data visualization enables you to quickly identify and block unwanted activity. You can use Lastline Sensors to improve breach protection as they defend your network from malicious activity, as well as share data with any third-party security controls to launch response workflows.
Lastline Breach Defender’s dynamic blueprint of breach-related activity enables you to identify and prioritize mitigation actions by mapping network traffic associated with a breach. You can quickly understand the full scope of the threat, including compromised systems, communication between local and external systems, and data sets accessed and uploaded. The product analyzes suspicious traffic and objects in real time, not in minutes or hours, and provides you with the quickest time to notification and remediation.
Use Lastline Breach Defender to respond quickly and effectively to breaches early in their lifecycle. You can block unwanted network activity with the Lastline Sensors, or export actionable threat intelligence to your existing security controls and update rule sets and workflows.
Lastline Breach Defender is designed specifically to deliver unmatched breach protection while keeping costs low: