Automation of doubt removal and immediate characterization of threats thanks to the GLIMPS & Sentinel One connector

Cyber-attacks are becoming more and more frequent and are now responding to new trends. They are also experiencing a structuring of the cyber attackers, with logics of division of tasks that make the attacks more dangerous.

The shortage of cybersecurity engineers, combined with the professionalization of attacker groups, means that analysts are faced with an increasing number of tasks. The automation of the qualification of results becomes necessary in order to focus on the most critical incidents.

The integration between Sentinel One EDR and GLIMPS Malware addresses these issues by adding a qualification and contextualization layer to alerts. GLIMPS Extended Malware Analysis Platform (XMAP), accelerates doubt removal activities by up to 90% on files identified as suspicious or malicious by Sentinel One.  This additional intelligence allows the analyst to refine his decision making, as he is often faced with weak signals.

The Sentinel One x GLIMPS Malware connector automates the qualification of Sentinel One results and provides a detailed threat analysis:

• Reduction of false positives
• Improvement of remediation with clear and accurate threat information
• Rapid threat characterization
• Detection of APTs and variants (thanks to the deep investigation of the GLIMPS Malware Deep Engine)

The concept-code analysis offered by GLIMPS Malware brings many advantages to the traditional EDR detection. It saves time and precision in the analysis and helps the analyst make decisions. This technological complementarity can be adapted to all types of server and workstation environments.