Automated detection methods, such as Intrusion Detection Systems (IDS), Endpoint Detection and Response (EDR) capabilities, and Security Information and Event Management (SIEM) system alerts are useful, but they cannot detect all breaches. Advanced attackers obfuscate their actions to evade these common automated detection methods. Organizations that continuously hunt for anomalous network activity do not rely exclusively on automated detection: they assume that malicious actors have bypassed automated detection and already reside in the network. UnknownCyber provides a proactive hunt capability that defeats obfuscation and continuously hunts for intrusions by malicious actors that have bypassed common detection methods and are already inside critical infrastructure.
