Group-IB, a global threat hunting and intelligence company headquartered in Singapore, was included in KuppingerCole Analysts AG’s 2020 report ‘Leadership Compass for Network Detection and Response’ for its Managed Extended Detection and Response (MXDR), a solution combining proactive protection against sophisticated threats and proactive global threat hunting. KuppingerCole Analysts AG, a Europe-based independent analyst organization, identified Group-IB as a «product leader» and «innovation leader» for MXDR’ security, wide NDR functionality, and unique integration capabilities. KuppingerCole analysts particularly noted MXDR’s capability for industrial applications and the company’s innovativeness — a key capability in all IT market segments.
Group-IB MXDR, trusted by banks, financial organizations, and industrial enterprises in dozens of countries in Western Europe, Africa and South-Eastern Asia, embodies adversary-centric approach and ensures protection against the most complex targeted attacks and advanced persistent threats (APTs), effective automated response and mitigation in a single platform. This adversary-centric approach is implemented through MXDR enrichment with information from Group-IB’s attribution-based Threat Intelligence system that holds the most up-to-date data on indicators of compromise, attackers and their TTPs, securing precise attribution of cyberattacks to a specific threat actor.
Group-IB MXDR includes five major modules — MXDR Sensor, MXDR Polygon, MXDR Decryptor, MXDR Huntpoint, MXDR Huntbox — that ensure correlation of internal and external telemetry data for effective threat hunting and analysis that can detect sophisticated attacks at the preparation stage.
In its report, KuppingerCole Analysts AG, in particular, highlighted Group-IB MXDR’ ability to detect lateral movement and communications with attackers’ CnC servers thanks to anomaly detection algorithms (such as domain generation algorithms analysis) and gave credits to MXDR analyzing malware leveraging unsupervised machine learning models.
Group-IB CTO and Head of Threat Hunting Intelligence