Key Threats We Detect and Block
BlackfishID is capable of blocking and detecting the following categories of threats in real-time:
Malware and Ransomware: Identification and containment of malicious software and data hijacking attacks.
Fileless Attacks: Detection of threats operating in memory without leaving disk traces.
Malicious or Automated Scripts: Identification and neutralization of unauthorized scripts.
Suspicious or Unauthorized Processes: Detection of unusual or disallowed activities on endpoints.
Exploitable Vulnerabilities on Devices (Proactive Management): Identification of security weaknesses that can be exploited by attackers.
Anomalous Behaviors using AI: Detection of unusual or suspicious activity patterns indicating a potential threat, utilizing artificial intelligence.
Exploits and Advanced 0-day Threats: Identification of attacks that leverage unknown or newly discovered vulnerabilities.
Lateral Network Movements: Detection of attackers' attempts to move between systems within the network.
Advanced Persistent Threats (APTs): Identification and mitigation of prolonged and highly sophisticated attacks.
Automated and/or Managed Response by Our Team (Critical Detections): BlackfishID can execute response actions autonomously and/or our team of experts intervenes in critical detections.
Breach Detection and Digital Exposure
BlackfishID monitors and alerts on the exposure of sensitive information:
Deep and Dark Web Monitoring: Active surveillance on underground forums, illicit marketplaces, and other dark web sources.
Detection of Leaked Credentials (Emails, Passwords...): Immediate alerts when your organization's credentials are identified in compromised databases.
Alerts when Sensitive Information Linked to the Company's Domain is Exposed: Notifications about any sensitive corporate data associated with your domain appearing publicly exposed.
Support to Mitigate Risks Associated with that Exposure: Guidance and assistance to reduce the impact of exposed information.
Domain Security
BlackfishID strengthens your domain's security and authentication:
Continuous Auditing of SPF, DKIM, and DMARC: Constant verification of these email authentication protocol configurations to prevent identity spoofing.
Technical Recommendations to Strengthen Email Authentication: Suggestions and detailed steps to improve the security of your email communications.
Visibility on Misconfigured Implementations: Identification of errors or weak configurations in your domain that could be exploited.
24/7 Incident Response Team Support
Our team of experts complements BlackfishID's technology with continuous human oversight:
Real-time Human Analysis for Critical Detections: Security experts monitor and analyze the most important alerts to ensure a precise response.
Management of Alerts Not Automatically Contained: Manual intervention when threats require action beyond automation.
Review of Unblocked Detections: In cases where a threat has not been automatically blocked, our 24/7 immediate response team will review and manage the detection.
Response Times Under 2 Hours for Urgent Threats: Commitment to rapid action against high-priority incidents.