STEALTHbits Technologies

The latest release of StealthINTERCEPT for QRadar has been validated as Ready for IBM Security Intelligence. Now you can monitor activity of Active Directory, File Systems and Exchange in real-time, and receive alerts of suspicious activity in your QRadar console ... all without the need for native logging. Monitor insider activities and improve the security profile by correlating with network activity already being watched ... adding a whole new context to security intelligence.

Watch this 2 minute video to see 3 example scenarios:

http://www.stealthbits.com/qradar

During this recorded webinar, hear our Chief Strategy & Research Officer, Jonathan Sander, break down this unprecedented attack. Jonathan will walk you through everything we know today about the breach and help you dispel the myths. You walk away with everything you need to understand the security risks and explain the breach to others in your organization. More importantly, he will walk you through the preventative measures that would have thwarted the breach and mitigated its effectiveness at various stages of the attack.

Webinar Link:

 https://www1.gotomeeting.com/register/265633968

STEALTHbits' Strategy & Research Officer, Jonathan Sander, speaks about the IBM relationship and the value STEALTHbits brings to IBM Security Solutions, such as QRadar and ISIM in this brief 2:30 video.

https://www.youtube.com/watch?v=UoS6y2Ni_0g 
 

Finding Who Has Admin Rights on Desktops and Servers

Local Administrator groups are created on every desktop and server when they are initially built, providing complete access at the system level to perform various administrative tasks. In most organizations, it’s not uncommon to find that there are no facilities or processes in place to centrally maintain or monitor who belongs to these groups, who’s being added and removed, and what members are actually doing with these access privileges.

http://www.youtube.com/watch?v=8KcWpMY5Z-s&feature=c4-overview&list=UUOZ20ddw47c1dMSl3zY-Q4g

STEALTHbits entered the App Throwdown during the 2014 Pulse Conference and was chosen as a top 5 finalist out of 27 submissions. Watch the video on Youtube: https://www.youtube.com/watch?v=j6GBdZv2yIc&feature=youtu.be

Press Release: IBM Certifies StealthAUDIT As Engine To Feed ISIM Unstructured Data Intelligence

http://www.stealthbits.com/press/item/81-ibm-certifies-stealthaudit-as-engine-to-feed-isim-unstructured-data-intelligence

Below is an excerpt from the recent Gartner Magic Quadrant report on Identity and Access Governance. 

Gartner MQ for IAG

STEALTHbits Technologies: StealthAUDIT Management Platform

Founded in 2001, this New Jersey-based firm has provided products focused on Microsoft

platforms for addressing many data access governance concerns in file systems, Microsoft Active

Directory and other collaboration applications. Additional tools in its portfolio address issues such

as Active Directory auditing and cleanup, and additional capabilities are offered for audit and

compliance in data and Microsoft application environments. STEALTHbits is included here because

of its work in data access governance and its growing role in general IAG products.

To learn more check out Report ID: G00235195

Cool Vendors in Security: Identity and Access Management, 2013

Gartner Article Number: ID:G00247950

Earl Perkins, Gartner Analyst said, "STEALTHbits brings unstructured data access governance to IAM for

Windows infrastructure. While IAG solutions focus on governing access to applications,

STEALTHbits has features that create an environment for collecting, analyzing and

reporting on unstructured data environments."

STEALTHbits Technologies was named a winner of a 2015 IBM Beacon Award for Outstanding Security Solution. Each year, this honor is awarded to a select number of IBM Business Partners who have delivered exceptional solutions to drive business value and transform the way their clients and industries do business in the future. The 2015 awards recognize achievements across a wide-range of solution areas, including, cloud, analytics, mobile, security and social business.

It’s effectively impossible to generate the level of security intelligence needed from the Microsoft infrastructure using native logging alone. When advanced threats like malware make it over the fence, StealthINTERCEPT is there to detect it quickly, before substantial damage can be done. And our seamless integration with QRadar makes it a no-brainer for IBM’s clients.

Watch the IBM interview with Kevin Foisy, Co-Founder and CTO:

http://youtu.be/d3MD0_NVKwc

Call Title: Giving ISIM the Competitive Advantage: Compete against and defeat the other IAM vendors  

Abstract: Organizations face more complexity than ever in ensuring users have appropriate resource access while maintaining compliance and minimizing security risks. Aside from the burden of identity management, administrators must also address the growing problem of Unstructured Data (user-generated data), which, on average, represents nearly 80% of all information in an organization.  To make matters worse, it’s estimated that 30-40% of all organization’s Unstructured Data contains sensitive content in the form of Personally Identifiable Information or Intellectual Property.

Identity and Access Management (IAM) vendors predominantly manage access and governance to critical applications, databases, and directory services. This access governance does not extend into the massive amounts of data contained in File Shares or SharePoint sites, making it blind to the entitlements being granted to unstructured data resources.

Join this webinar to discover how leveraging StealthAUDIT for ISIM can:

·        Eliminate unstructured data blind spots

·        Automate access governance over unstructured data

·        Increase the value of your ISIM deployment, extending its coverage to Microsoft-based file assets

·        Allow you to gain the competitive edge to win more deals against other IAM vendors

Speakers: Ravi Srinivasan, Director IAM, Cloud Security PM, IBM
                        Jonathan Sander, Strategy & Research Officer, STEALTHbits


Date: Tuesday, May 20, 2014

Time: 11:00 a.m. to Noon U.S. Eastern time    

US Toll Free Dial In: 866-803-2143
US Toll Dial In: 1-210-795-1098  
Passcode: COMPETITIVE
Webcast URL: For IBMers: https://w3.ibm.com/collaboration/meeting/unyte.nsf/join?OpenForm&?schedid=6081872
For Business Partners: https://www.ibm.com/collaboration/meeting/join?schedid=6081872


 

Extending the value of your QRadar investment with monitoring of AD and file system activity

By utilizing StealthINTERCEPT®, the Windows Event Monitor for QRadar provides the ability to feed concise detail regarding file system access and Active Directory modifications to QRadar in real time. By distilling change and access activities into individual, complete, self-contained access events, this integration efficiently collects and delivers critical activity information for easy consumption and correlation by QRadar. These events are often impractical to collect and make sense of using standard Windows EventLog technology, as they can be extremely disjointed and in some cases incomplete. Additionally, high volume EventLog traffic historically introduces unacceptable overhead to servers that are configured to collect everything. The StealthINTERCEPT (SI) event collection approach brings to bear deep introspection that has been specifically geared for completeness and efficiency for the specific event types that it collects.

Benefits

By extending monitoring visibility for applications and data for access configuration changes, and file system contents and permissions access, the StealthINTERCEPT® integration provides real savings in terms of identifying and mitigating unauthorized or potentially risky activities in the environment. These savings are realized through expediting awareness (early detection and detailed reporting) of potentially costly issues of inadvertent or malicious changes in access rights (based on groups), global configuration (in the form of GPOs) or access to sensitive data. By identifying and alerting on these situations, appropriate remediation steps can be taken as soon as possible to prevent or mitigate resultant security fallout or interruption of service to critical applications. This information can also be correlated with network access activity data from QRADAR to further pinpoint the source of malicious activities for a more definitive picture of exposures and remediation options.

In addition, this integration facilitates the visualization of Active Directory and file system usage patterns, enabling the formulation of steps to minimize costs that could be incurred when these repositories are moved, migrated, or otherwise caused to become unavailable to critical applications or individuals that rely on them.

Please view our 2 minute video that depicts how and why you need STEALTHbits to gain visibility into unstructured data (SharePoint and File Shares) and improve the value of your ISIM identity and access management solution.

http://youtu.be/aqTEuQE9aKs

Listen to Jose Bravo, IBM's North American Security Architect discuss ways to secure and protect key systems and assets.

http://youtu.be/PzSv5mYci1Q