EMET malicious user journey for cloud apps powered by Reveal Security

EMET malicious user journey analytics powered by Reveal Security is a leading security analytics tool that uses user journey analytics to detect malicious activity for Cloud Apps.

The supported cloud apps are MS365, Salesforce, OKTA, AWS, AZURE, and Dynamics 365 (other SaaS applications are to be discussed separately).

The solution provides the following benefits:

• User Journey Analytics: User Journey Analytics is based on the analysis of activity sequences performed while using an application, in contrast with UEBA, which analyzes each activity individually and then builds a timeline. The sequence provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. Higher quality alerts mean security analysts reduce wasted time on false positives and alert for cases other products fail to notice.
• Multiple Journey Profiles per User: Leveraging RevealSecurity's patented clustering engine - tailored for clustering user journeys - TrackerIQ automatically learns multiple journey profiles across applications. Detecting anomalous journeys by comparing users to themselves and their peers provides an extremely high signal-to-noise ratio.
• Application Layer Detection and Response: TrackerIQ complements XDR solutions at the business application layer to detect threats and fraud. Existing detection solutions are focused on the infrastructure layers and on access to business applications, resulting in very limited effectiveness against malicious insiders as well as external attackers who succeed to bypass authentication mechanisms.
• Application Agnostic Detection: The detection model is applied to any SaaS or custom-built application, analyzing user journeys in and across applications to detect anomalies. This model eliminates the need to understand business application logic and no rules are required.

For Splunk customers, TrackerIQ connects natively to Splunk, offering simpler, streamlined deployment. EMET's Splunk experts will assist Splunk customers to configure and connect their Splunk and TrackerIQ deployments for an easy deployment experience. The product pricing includes up to 1 million log records processed per month. For more than 1 million log records processed per month, please ask for a private pricing proposal.