Webroot Introduces BrightCloud® Threat Investigator

BROOMFIELD, Colo., Feb. 24, 2016 /PRNewswire/ -- Webroot, the market leader in next-generation endpoint security and cloud-based collective threat intelligence, today announced the release of the Webroot BrightCloud® Threat Investigator. The powerful new threat investigation tool provides enterprises, managed service providers (MSPs), and managed security service providers (MSSPs) with instant access to actionable threat intelligence on individual IPs and URLs, and the ability to drill down into each object's category, history, and related IPs or URLs for threat investigation and incident response. In the event of an ongoing cyber investigation, this saves precious time and enables security analysts or first responders to focus on the most critical issues right away. Security personnel are then better able to mitigate the effects of a breach, limit exfiltration of customer data or intellectual property, and limit reputation-related fallout.  

According to the Webroot 2016 Threat Brief, attackers are using a larger pool of IP addresses for launching attacks and are increasing their usage of new IP space as threat intelligence services improve at identifying these threats. Coupled with the overwhelming amount of information and alerts security personnel receive, this has created an environment that makes it challenging to prioritize and minimize response time. The BrightCloud Threat Investigator's web-based, graphical user interface (GUI) research console makes research manageable by providing insight into a number of variables, including why Webroot categorizes a specific IP or URL as malicious, why specific reputation scores are assigned, and how long a particular IP or URL has been a threat. This context allows enterprise security teams to quickly make specific data-driven decisions.

The BrightCloud Threat Investigator complements Webroot's existing enterprise solutions. When using the BrightCloud Threat Investigator in conjunction with BrightCloud Threat Intelligence for Next Generation Firewall (NGFW), network administrators and security analysts can investigate which IPs impacting the network represent the highest risk and which can be trusted, so they can make better informed decisions when allowing or blocking IPs. When combining the Threat Investigator with BrightCloud Threat Intelligence for Security Information and Event Management (SIEM), security analysts can review prioritized IP reputation alerts, isolate malicious attack sources, quickly investigate incidents and syslog data, and take appropriate action in a timely fashion. The BrightCloud Threat Investigator API is also available for Webroot technology partners to integrate with their own offerings.

"Today's enterprises are faced with such vast quantities of threat information, millions of log entries, and thousands of SIEM alerts, and that can be overwhelming," said Mike Malloy, executive vice president of products and strategy at Webroot. "The BrightCloud Threat Investigator provides a rich source of additional detail to help security analysts determine the right course of action, save precious time in the investigation and remediation process, and mitigate the costly effects of a breach."

In order to identify the proverbial cybersecurity "needle in a haystack," security personnel must use their time and resources wisely. The Webroot Threat Investigator makes this possible by leveraging the massive cloud infrastructure and machine learning technology in the Webroot Threat Intelligence Platform. Analysts can examine individual objects and predict which of those are likely to be malicious based on their relationships with other internet objects. Webroot continuously monitors and maintains a database of over four billion IP addresses from which a dynamic list of approximately 12 million malicious IPs is updated every few minutes. The Webroot Threat Intelligence Platform correlates IP reputation data with URL, file as well as mobile and PC application data to determine relationships between object types while providing a predictive risk score for each IP and URL.

For more information, please visit Webroot online at www.webroot.com/Webroot-BrightCloud-Threat-Investigator.

About Webroot
Webroot delivers next-generation endpoint security and threat intelligence services to protect businesses and individuals around the globe. Our smarter approach harnesses the power of cloud-based collective threat intelligence derived from millions of real-world devices to stop threats in real time and help secure the connected world. Our award-winning SecureAnywhere® endpoint solutions and BrightCloud® Threat Intelligence Services protect tens of millions of devices across businesses, home users, and the Internet of Things. Trusted and integrated by market-leading companies, including Cisco, F5 Networks, Palo Alto Networks, A10 Networks, Aruba Networks, and more. Webroot is headquartered in Colorado and operates globally across North America, Europe, and Asia. Discover Smarter Cybersecurity™ solutions at www.webroot.com.

Social Media: Twitter | LinkedIn | YouTube | Facebook

©2016 Webroot Inc. All rights reserved. Webroot, SecureAnywhere, Webroot SecureAnywhere, Webroot BrightCloud, BrightCloud, and Smarter Cybersecurity are trademarks or registered trademarks of Webroot Inc. in the United States and other countries. All other trademarks are properties of their respective owners.

Logo - http://photos.prnewswire.com/prnh/20121016/LA94090LOGO

SOURCE Webroot

Related Links

http://www.webroot.com