Cyber risk and advisory programs that identify security gaps and build strategies to address them.
MDR that provides improved detection, 24/7 threat hunting, end-to-end coverage and most of all, complete Response.
Our team delivers the fastest response time in the industry. Threat suppression within just 4 hours of being engaged.
Be protected by the best from Day 1.
24/7 Threat Investigation and Response.
Expert hunting, research and content.
Defend brute force attacks, active intrusions and unauthorized scans.
Safeguard endpoints 24/7 by isolating and remediating threats to prevent lateral spread.
Investigation and enhanced threat detection across multi-cloud or hybrid environments.
Configuration escalations, policy and posture management.
Detects malicious insider behavior leveraging Machine Learning models.
Join Tim Segato, Director, Product Management and Ryan Westman, Manager,…
Join us for a live security brefing with (ISC)2 members.
Ask questions and hear from Cybersecurity experts from eSentire,…
This blog was originally published on CyFIR.com and has been reposted as-is here following eSentire’s acquisition of CyFIR Inc. in June 2021. As of the date of the acquisition, no changes have been made to the content below.
Collecting forensically-sound information is a critical need for Legal Departments during many proceedings, such as when responding to a subpoena, preparing for litigation, or during a merger or acquisition. This use case example illustrates how CyFIR eDiscovery Services can significantly improve the process of collecting and storing evidentiary data, resulting in faster and more accurate results.
The first time Emily heard about Project Showerhead, it was only an internal R&D project. As General Counsel, she had reviewed the patent filing related to the underlying technology. Few within the company realized at that time how many commercial applications Project Showerhead would have. Now, five years later, the project was fundamental to the company’s largest source of revenue. It was also at the center of ongoing litigation with their main competitor.
Emily knew the company was on solid ground to defend their intellectual property claim in court. She suspected that their competitor – a company ten times their size – had filed the lawsuit in an attempt to slow their growth by forcing them to divert resources into a costly and time-consuming legal battle. Emily knew their competitor had deeper pockets and more lawyers, but she had one advantage their competitor did not.
One of the first steps in preparing for litigation was to execute a company-wide search for all documents relevant to the project. Using CyFIR, one of Emily’s eDiscovery technicians began a company-wide keyword search that examined the full text of documents stored on any machine across their network, including field offices around the country. The search also examined email messages stored on their Exchange server and local Outlook PST files of specific employees assigned to Project Showerhead. The technician copied all the documents to a local storage location and placed a report summarizing the results on Emily’s desk. The entire eDiscovery search had evaluated hundreds of thousands of files and returned a complete set of evidentiary data in less than a day. With CyFIR, one technician was able to complete one of the most time-consuming tasks in preparing for litigation.
As Emily had anticipated, their competitor eventually dropped the lawsuit. Due to CyFIR’s speed and accuracy, preparing evidentiary data for the case had taken only a minimal amount of time and effort, and did not require an army of lawyers to complete.
Emily’s company licensed the CyFIR Enterprise Platform primarily for its Incident Response capabilities. However, her story demonstrates how CyFIR’s ability to search across an entire network can deliver significant value for Legal Departments when tasked with collecting documents from across the company. CyFIR reduces the labor-intensive nature of enterprise-wide search and document collection that is common during subpoenas or audits, in preparation for mergers and acquisitions, or in demonstrating regulatory compliance.
eSentire is the Authority in Managed Detection and Response, protecting the critical data and applications of 1000+ organizations in 70+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events. Combining cutting-edge machine learning XDR technology, 24/7 Threat Hunting, and proven security operations leadership, eSentire mitigates business risk, and enables security at scale. The Team eSentire difference means enterprises are protected by the best in the business with a named Cyber Risk Advisor, 24/7 access to SOC Cyber Analysts & Elite Threat Hunters, and industry-leading threat intelligence research from eSentire’s Threat Response Unit (TRU). eSentire provides Managed Risk, Managed Detection and Response and Incident Response services. For more information, visit www.esentire.com and follow @eSentire.