Team Cymru Solutions for the Public Sector

Pure Signal™ Orbit is a digital business risks management platform, specifically for external IT assets. Unlike other Attack Surface Management (ASM) providers, Pure Signal™ Orbit is unique as it also blends Vulnerability Management and Threat Intelligence into a single platform.

These distinct yet seamlessly integrated capabilities enable organizations to save time, money, and effort. ASM, Vulnerabilities and Threats together helps organizations to consolidate several technologies to reduce costs, enables IT to be more agile and more efficient at reducing risks, and provides visibility of threats impacting owned, or third-party assets, as they emerge.

With continuous discovery and risk assessment monitoring, security practitioners are able to keep the organization ahead of unwanted risk. Pure Signal™ Orbit requires no installation, no specialized training, nor any of the complexities involved with managing external digital assets.

Pure Signal™ Recon is a cloud hosted security analyst query platform that expands network forensics capabilities to Internet scale. Using the world’s largest data ocean created specifically for Threat Intelligence is made easier by a graphical interface that displays information across over 55 distinct datasets.

This enables skilled security analysts and threat hunters to trace malicious activity back to the source, map threat actors’ infrastructures, and monitor them. Recon empowers learning the behaviour patterns of tracked threat actors and allows agile updating of block lists and proactive defensive measures. When an organization is compromised, Recon provides critical information to identify the source and shut it down.

Recon also enables organizations with capabilities to proactively monitor third parties and cyber-attack victims to identify indicators of compromise before they are aware of a breach to further address third party risks prior to impact.

Team Cymru Threat Feeds are uniquely extracted from our own Pure Signal™ data, renowned as the world’s largest data ocean created specifically for the purposes of Cyber Threat Intelligence.

There are three distinct Threat Feeds as follows;

• Botnet Analysis & Reporting (BARS), for malware analysts, researchers and threat hunters
• Controllers, for network security teams
• IP Reputation, for network and gateway security teams

As with all of our services that leverage Pure Signal™, the data is available and updated continuously, and as near real time as possible. For example, our IP Reputation Feed is an hourly generated XML feed spanning 24 hours of every IP address that has been observed in malicious activity.

The data within our feeds is derived from known and confirmed malicious infrastructure, defined as networks or nodes actively communicating to victim networks with known TTPs, or victim networks proactively beaconing out to Command & Control Infrastructure (C2) for example.

This ensures Team Cymru feeds are unrivalled in their integrity, accuracy and value for the teams that leverage them.