Recorded Future, the leading threat intelligence company, announced Recorded Future Express, a new offering that layers threat intelligence over existing security workflows through an easy-to-use†Browser Extension. Express provides real-time intelligence within any web-based application, delivering up-to-the-minute context, risk scores, and transparent evidence behind scoring.
Security professionals can use Express to access threat intelligence within SIEM solutions to accelerate alert triage, vulnerability scanners to prioritize patching, and incident response systems to improve action, as well as with other news or intelligence sources to get meaningful context faster.
“The Recorded Future plugin makes it possible to reduce our response times by having real-time threat intelligence at our fingertips. It has proven to be a great time saver and a process improvement we weren’t even expecting when we chose Recorded Future. These kinds of major wins from a vendor significantly increases their value to us.”†—†Darian Lewis, Security Architect, Relativity
Recorded Future delivers relevant, real-time threat intelligence powered by machine learning to manage risk. The company’s patented technology automatically collects and analyzes information and provides invaluable context for better decision-making on potential threats.
“Security teams need to be exponentially faster than bad actors and address attack surface expansion — we’re not just outcompeting bad guys, we’re working against risk presented by the IoT, digital transformation, the supply chain, and more. Express is designed to remove bottlenecks and silos between security functions by eliminating barriers to adoption and delivering actionable threat intelligence within existing security processes.” —†Christopher Ahlberg, CEO and Co-Founder, Recorded Future
Putting Intelligence in Action
Express works seamlessly with SIEM applications, email security portals, vulnerability scanners, email providers, and more. With one click, Express identifies and organizes all IPs, hashes, CVEs, and domains on a page and surfaces real-time risk scores and the evidence behind those scores, arming security teams with the intelligence needed to determine action.
Use case examples include:
Triage and prioritize alerts in seconds without external investigation
It’s been reported that up to†44 percent of security alerts†are not investigated, leaving massive gaps in potentially exploited organizational weaknesses. By layering threat intelligence over existing SIEM deployments, security professionals are able to assess alerts that pose the greatest risk and make decisions immediately.†
Investigation and confirmation of phishing emails
More than†90 percent of malware†is delivered over email, resulting in thousands of malicious emails for an average organization to catch and investigate a year. Express amplifies the power of deployed email security solutions with rich context about IPs and domains associated with suspicious emails.†
Act on the vulnerabilities that matter to your organization
In 2018, there were more than†16,500 known security vulnerabilities cataloged†— a number that’s continuing to grow annually. With Express, prioritize which vulnerabilities represent imminent or significant organizational risk, with external context about vulnerabilities currently or soon-to-be exploited.
Streamlined decoding of malicious files†
The†average cost of a malware attack†on a company is†$2.4 million. For malicious files, security teams need rapid context and enrichment on the indicators to aid response and accelerate remediation. Express speeds up malware analysis and verdicts by providing real-time access to intelligence on associated IOCs.
Analysis of news and data sources
Express instantly identifies and organizes relevant information around hashes, IPs, domains, and vulnerabilities when viewing security content to exponentially increase security information consumption and facilitate action.
Recorded Future Delivering Value and Return on Investment for Customers
In an IDC White Paper sponsored by Recorded Future, “Organizations React to Security Threats More Efficiently and Cost Effectively With Recorded Future,” IDC concluded that Recorded Future enabled security teams to identify threats to their organizations 10 times faster, while helping to resolve security incidents 63 percent faster when they do occur.
Today, it would take nearly 9,000 analysts, working eight hours a day, five days a week, for 52 weeks per year, to process the same amount of security event data that Recorded Future’s machine analytics can process in the same time frame.
