What’s new in ActiveEye

We're excited to share the enhancements we’ve made this past quarter to improve your ActiveEye experience. For any questions, contact our Customer Success team. 

STAY IN TOUCH WITH YOUR CORE METRICS

The updated ActiveEye homepage provides up-to-date information about the cybersecurity metrics most important to your organization. This dashboard allows you to gather the core metrics for the current month and easily communicate them with key stakeholders. This feature also allows you to view and confirm any novel threats identified in your environment and provides critical context to determine if any of these threats will become credible.

OUR COMMITMENT TO COMPLIANCE REQUIREMENTS

We have recently completed many critical compliance initiatives for ActiveEye, providing internationally recognized assurance that we have a trustworthy platform to protect your information. The ActiveEye development and engineering team completed the ISO 27000 Series certification audit by LRQA with zero major and zero minor findings against:

 ISO/IEC 27001:2013  Information security controls

 ISO/IEC 27017:2015  Information security controls for cloud computing

 ISO/IEC 27018:2019  Protecting PII in the public cloud for data processors

 ISO/IEC 27701:2019  Privacy information management

BRAZILIAN ACTIVEEYE INSTANCE

Customers who have a contractual or compliance-based need to keep data hosted in Brazil or the LACR region rather than the US are now able to do so, thanks to our new virtual SOC in Brazil.

ON-DEMAND WEBINAR: CYBER THREATS TO PUBLIC SAFETY

Our team of experts from the Public Safety Threat Alliance (PSTA) and ActiveEye Security Operations Center (SOC)  recently hosted a webinar discussing current cyber threats to public safety, as well as a wide range of other topics, including:

• The latest updates on this year’s SLCGP funding
• Threat actors’ tactics, techniques and procedures (TTPs) against public safety and enterprise organizations
• Trend analysis of cybersecurity attacks
• Case studies of recent cyber attacks  
• Effective strategies to mitigate the risk and impact of attacks

If you missed it, you can watch the on-demand webinar now.

RECENT BLOGS 

Cyber exercises are crucial to keeping your agency in shape. Don’t let a lack of planning be the reason you are not prepared when a cyber attack hits. We recently published a series of blogs that can help you understand the importance of cyber exercises and how to plan them effectively:

• 4 Cybersecurity Incident Scenarios You Should Test
• What Are the Benefits of Cyber Exercises?
• Why Cyber Exercises Work: Three Real-World Examples
• How Cyber Exercises Can Keep You in Shape
• How to Design an Effective Cyber Exercise

Is your organization taking the necessary precautions to protect usernames and passwords from threat actors? Learn how they’re using credential abuse to target public safety agencies in this blog that shares highlights from a recent PSTA report.

Interested in our cybersecurity blogs? Subscribe to be alerted each time a new one is published!

We’re excited to share updates on some of the recent work that’s been done to improve your ActiveEye experience. If you're an ActiveEye customer and have any questions or concerns, contact us here. For a quick overview of the ActiveEye platform, click here.

EASILY SEE THE VALUE OF YOUR MDR SERVICE

The new Executive Metrics dashboard provides key insights into the value of your ActiveEye program and Managed Detection and Response (MDR) services. The dashboard breaks down the data into three key areas:

• Platform and Automation - How well does the MDR service handle the volume of alerts?
• Response Times - How quickly are credible threats in your environment being addressed?
• Threat Insights - What are the threats, where do they come from and what are they targeting?

MORE POWERFUL INVESTIGATIONS

We’ve recently added a new filter within key fields that allows you to use a free-text wildcard search during an investigation. The wildcard search feature is available within the destination, hostname and description fields now and will expand to other fields in future updates.

FASTER RESPONSE TIMES TO CREDIBLE THREATS

ActiveEye already automatically processes 98%+ of alert activity with automation and playbooks custom to your environment.  ActiveEye’s new machine learning prioritization enables SOC analysts to investigate the remaining alerts with a focus on your most likely credible threats first. The result is a faster response time for meaningful activity. The machine learning algorithm assigns a score based on multiple factors, including the details of the alert, its history within the environment and the predicted time to investigate. The generated score dictates the priority in which the SOC addresses the alerts.

CANADIAN ACTIVEEYE INSTANCE

Customers who have a contractual or compliance-based need to keep data hosted in Canada rather than the US are now able to do so, thanks to our new virtual SOC in Canada.

RECENT BLOGS 

Read this cybersecurity blog to learn more about how the CL0P ransomware gang has exploited a vulnerability in MOVEit software. The blog details the specific threats from CL0P and how to protect against, detect and respond to the vulnerabilities.

Snake Malware has been used for espionage purposes for many years, and while it has been exposed publicly, it still poses a global threat to organizations. Learn more about Snake Malware and how our MDR services help to protect against it in this cybersecurity blog.