Freely subscribe to our NEWSLETTER

MazeHunter provides Cymmetria’s customers with an advanced threat hunting capability, enabling direct action against attackers within legal boundaries. The technology extends forensics, control, and mitigation capabilities to attacker-controlled computers within the confines of the victim’s own network environment, making it simpler to investigate, contain, and engage with live adversaries and compromised hosts.

The technology pivots across the attacker-controlled infrastructure within the customer’s environment, allowing defenders to affect the “5 D’s”: Deceive, Disrupt, Deny, Degrade, and Destroy. These activities exist on a wide spectrum of incident response, allowing organizations to actively defend their infrastructure using tools and capabilities within their own controlled networks against an agile force intent on compromise, theft or destruction.

MazeHunter provides live forensics, accelerates discovery of other affected machines, facilitates recovery of the attackers’ toolset, makes the data being stolen visible, and speeds containment and mitigation.

The product takes into account international and state regulations, emphasizing the U.S. Computer Fraud & Abuse Act (CFAA). While some actions are no different than regular incident response operations, performed automatically and against live attackers, other actions require careful consideration.

Cymmetria will be publishing an exhaustive legal analysis, including a suggested decision-making policy model so clients can determine what can be done, under what conditions, and how extensive and aggressive the response can be. They will need to further consult with their own legal counsel to determine policies and procedures.