Attivo Networks Enhances Deception Platform With Forensic Collection

Attivo Networks announced on Feb. 12 that it is expanding its ThreatDefend cyber-security deception platform with its new "The Informer" forensic collection technology. Deception is a class of cyber-security technology that aims to trick attackers with fake services as an approach to help limit risk and expose potential adversaries. With its ThreatDefend Platform, Attivo provides deception-based detection for the entire network. The new Informer forensics capability goes beyond just deception, collecting data on potential attackers that have fallen for the deception, in an attempt to help organizations better defend and respond to attacks. "The Informer is a net new investigation and analysis tool that is a component of the ThreatDefend Platform," Carolyn Crandall, Chief Deception Officer at Attivo, told eWEEK. "Data from detection alerts and known threat intelligence providers are aggregated into a single dashboard making the responders job exponentially more efficient with the goal of driving response time from hours down to minutes."