The myriad of security tools used by businesses today creates massive quantities of data and surfaces too many alerts for analysts to effectively manage. As threats become increasingly sophisticated and the cyber security industry continues to face a skills shortage, over-worked and under-resourced teams urgently need augmentation.
Cyber AI Analyst, the product of a research initiative from Darktrace’s R&D Center in Cambridge, was built to augment security teams and optimize threat investigation. It continuously examines every event that arises in Darktrace’s Enterprise Immune System, emulating expert human thought processes for autonomous triaging and reporting.
Learning outcomes:
- Learn how an AI approach to security identifies, responds and investigates threats as they appear
- Understand how a technology that can mimic complex human thought processes was created
- Learn how supervised machine learning can be used to automate the threat investigation process, doing the heavy lifting of the daily threat investigations and identifying incidents of interest
- Discover how the technology reported on a nation-state APT weeks before public attribution
- Understand how the technology can be of great value to a SOC, augmenting and uplifting strained security team
