ReversingLabs Integration with Microsoft Sentinel
RL partners with Microsoft Sentinel, reducing triage time and analyst fatigue.
Enables access to the ReversingLabs Spectra Intelligence (Formerly TitaniumCloud) File Reputation and File Hash Analysis APIs. The File Reputation API provides a simple classification for a submitted file hash and summarizes the static analysis, dynamic analysis, and AV scan information results. This integration empowers SOC teams to determine in seconds whether a file is goodware or malware, reducing incident triage and response time.
Injects specific ransomware hunting indicators into the Sentinel Threat Intelligence blade using the Sentinel TAXII connector. These indicators are taken from confirmed malware, checked for accuracy, and enriched with additional intelligence. They are also evaluated for activeness, providing a dynamic Cyber Threat Intelligence (CTI) for a Sentinel deployment to hunt ransomware at every stage of its lifecycle.
Provides a sample playbook that automatically enriches incidents with file hash reputation information from ReversingLabs Spectra Intelligence (Formerly TitaniumCloud), enabling faster and more accurate incident triage. The integration also includes a workbook that illustrates the integration’s impact on SOC performance.
Watch to learn how to upgrade your CI/CD pipeline with binary analysis, threat detection, and secure code signing.
In the last year, ReversingLabs observed a 289% increase in threats involving open-source repositories.
Reduce alert fatigue and eliminate inefficient workflows to address new software supply chain TTPs by using ReversingLabs SSCS.