KuppingerCole Analysts AG Names Group-IB a Product Leader for MXDR

Group-IB, a global threat hunting and intelligence company headquartered in Singapore, was included in KuppingerCole Analysts AG’s 2020 report ‘Leadership Compass for Network Detection and Response’ for its Managed Extended Detection and Response (MXDR), a solution combining proactive protection against sophisticated threats and proactive global threat hunting. KuppingerCole Analysts AG, a Europe-based independent analyst organization, identified Group-IB as a «product leader» and «innovation leader» for MXDR’ security, wide NDR functionality, and unique integration capabilities. KuppingerCole analysts particularly noted MXDR’s capability for industrial applications and the company’s innovativeness — a key capability in all IT market segments.

Group-IB MXDR, trusted by banks, financial organizations, and industrial enterprises in dozens of countries in Western Europe, Africa and South-Eastern Asia, embodies adversary-centric approach and ensures protection against the most complex targeted attacks and advanced persistent threats (APTs), effective automated response and mitigation in a single platform. This adversary-centric approach is implemented through MXDR enrichment with information from Group-IB’s attribution-based Threat Intelligence system that holds the most up-to-date data on indicators of compromise, attackers and their TTPs, securing precise attribution of cyberattacks to a specific threat actor.

Group-IB MXDR includes five major modules — MXDR Sensor, MXDR Polygon, MXDR Decryptor, MXDR Huntpoint, MXDR Huntbox — that ensure correlation of internal and external telemetry data for effective threat hunting and analysis that can detect sophisticated attacks at the preparation stage.

Group-IB is a provider of high-quality threat intel, which is also used by their products as well as shared with Cyber Threat Alliance, global CERTs, Europol, Interpol, etc.,’ KuppingerCole Analysts AG said in its report. ‘Group-IB’s MXDR is one of the most feature-rich NDR solutions in the market. It exceeds expectations for NDR functionality … Organizations that need a full range of NDR capabilities, especially for industrial applications, should consider Group-IB MXDR.

In its report, KuppingerCole Analysts AG, in particular, highlighted Group-IB MXDR’ ability to detect lateral movement and communications with attackers’ CnC servers thanks to anomaly detection algorithms (such as domain generation algorithms analysis) and gave credits to MXDR analyzing malware leveraging unsupervised machine learning models.

Group-IB is honored to have its MXDR listed in KuppingerCole Analysts AG ‘Leadership Compass for Network Detection and Response’. Masterminding its MXDR, Group-IB sought to create a single solution for the protection of both corporate and industrial networks that would combine threat hunting with automated incident management and response. As a result, one of a kind solution emerged that is capable of distinguishing relevant attacks and attackers’ infrastructures at a preparation stage and whose constant enrichment with threat intelligence data ensures precise correlation and attribution of threats.

Dmitry Volkov
Dmitry Volkov

Group-IB CTO and Head of Threat Hunting Intelligence

About Group-IB

Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses, citizens, and support law enforcement operations.

Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.

Group-IB’s decentralized and autonomous operational structure helps it offer tailored, comprehensive support services with a high level of expertise. We map and mitigate adversaries’ tactics in each region, delivering customized cybersecurity solutions tailored to risk profiles and requirements of various industries, including retail, healthcare, gambling, financial services, manufacturing, crypto, and more.

The company’s global security leaders work in synergy with some of the industry’s most advanced technologies to offer detection and response capabilities that eliminate cyber disruptions agilely.

Group-IB’s Unified Risk Platform (URP) underpins its conviction to build a secure and trusted cyber environment by utilizing intelligence-driven technology and agile expertise that completely detects and defends against all nuances of digital crime. The platform proactively protects organizations’ critical infrastructure from sophisticated attacks while continuously analyzing potentially dangerous behavior all over their network.

The comprehensive suite includes the world’s most trusted Threat Intelligence, The most complete Fraud Protection, AI-powered Digital Risk Protection, Multi-layered protection with Managed Extended Detection and Response (XDR), All-infrastructure Business Email Protection, and External Attack Surface Management.

Furthermore, Group-IB’s full-cycle incident response and investigation capabilities have consistently elevated industry standards. This includes the 77,000+ hours of cybersecurity incident response completed by our sector-leading DFIR Laboratory, more than 1,400 successful investigations completed by the High-Tech Crime Investigations Department, and round-the-clock efforts of CERT-GIB.

Time and again, its solutions and services have been revered by leading advisory and analyst agencies such as Aite Novarica, Gartner®, Forrester, Frost & Sullivan, KuppingerCole Analysts AG, and more.

Being an active partner in global investigations, Group-IB collaborates with international law enforcement organizations such as INTERPOL, EUROPOL and AFRIPOL to create a safer cyberspace. Group-IB is also a member of the Europol European Cybercrime Centre’s (EC3) Advisory Group on Internet Security, which was created to foster closer cooperation between Europol and its leading non-law enforcement partners.