Platform Accelerators - Cloud

Deploy Cybraics today to get more value out of the leading cloud solutions tomorrow. We work with the best so you can be at the top of your game.

Identify and resolve hidden cloud threats

nLighten has dozens of cloud-specific analytics for AWS and Microsoft 365. We integrate with the different APIs and methods to ingest the log data to start, then apply a variety of the 250+ behavioral analytic detections to find threats that others miss.

Advanced analytics like Kumo for AWS Cloudtrail detect anomalous behaviors and deliver automated and predictive identification of suspicious activity. That’s the Cybraics difference; we eliminate the complexity and time spent on analysis and research to give you actionable cases.

Microsoft 365

Cybraics integrates with your Microsoft 365 to cover you from the standards like Sharemon and PowerBI to the difficult like Weird User Name - identifies lexically anomalous usernames that fail login and Cohort Anomaly that identifies anomalous location, folder, and access behavior.

Microsoft SharePoint

Cybraics uses Sharemon to detect suspicious activity on Sharepoint like:

unauthorized folder or document sharing outside of an organization (data leaking)
accessing folders or data that has been labeled “sensitive”
abnormal document and folder access outside of a user’s normal baseline behavior
downloading or deleting files or folders from anonymous accounts or links.

Microsoft Power BI

Cybraics monitors your Power BI and audits any time a Dataset, Folder, or Report is created, deleted, or edited. It also identifies various types of attacks, such as an account compromise, either at the initial stage or when it is being accessed externally by an attacker.

Azure

Cybraics integrates with your Azure environment to identify sophisticated threats. We apply our advanced behavioral analytics to identify threats like port beaconing, sloth (low entropy source port scanning), and port vulnerabilities that aren’t flagged by standard logging and alert tools.

AWS GuardDuty

Cybraics integrates with your AWS GuardDuty to identify threats. Our advanced behavioral analytics, algorithms, and Cohort Anomaly identify dozens of anomalous behaviors across your external, internal, and cloud traffic to notify you of suspicious activity.

AWS Cloudtrail

Cybraics integrates with your AWS Cloudtrail through Kumo behavioral analytics to identify failed login attempts, anomalous behavior like excessive S3 buckets, denied access alerts and patterns, and Cohort Anomaly to identify unusual user location, folder, and access behavior.

AWS CloudWatch

Cybraics integrates with your AWS CloudWatch to identify threats. Our advanced behavioral analytics, algorithms, and Cohort Anomaly identify dozens of anomalous behaviors across your external, internal, and cloud traffic to notify you of suspicious activity.

AWS VPC Flow Logs

Cybraics integrates with your AWS VPC Flow Logs to identify threats. Our advanced behavioral analytics, algorithms, and Cohort Anomaly identify dozens of anomalous behaviors across your external, internal, and cloud traffic to notify you of suspicious activity.

How we do it better

Most cyber tools use signature matching or baseline to detect issues. Cybraics nLighten™ integrates your cloud tools’ native alerts and role-matching techniques then goes further using our proprietary machine learning and AI-based behavioral analytics. We reduce the noise, filter 95%+ of false positives, and replace manual effort with automation.

Our four-step process:

ingests all native alerts/logs
identifies the entity metadata
assigns a risk score
then automates case creation.

nLighten automates 96% of case creation and our expert SOC team identifies the rest. Our data science team continually evaluates the algorithms, scoring, enrichment, and detections to give you the best combination of technology and human expertise.

Our 24/7 MDR option extends your SOC team’s coverage and helps fill expertise and headcount gaps to help you respond to threats anytime, anywhere.

Turn scattered data into powerful insights

97%

reduction from traditional SIEM alerts to actionable cases

96%

automated case creation

95%

reduction in false positives, bringing focus to relevant threats