Inoculator

Inoculator Scans for Known Threats Across Enterprises:

The Inoculator™ 1.5 scans the enterprise multiple times a day for known threats including known Zero-Day, intrusion artifacts such as registry keys and families of APT threats. Using this technology, organizations can create their own private threat database to quickly scan for threats targeting their specific business environment.

Inoculator does not use agents. It is able to remotely and automatically find some of the most advanced, state-sponsored threats today out-of-the-box with no additional supplied user data besides domain credentials.

Specify Artifact Components:

Users can specify specific APT artifact components from previous incidents (such as bad files, regkeys, processes, etc.). If a machine, under the protection of Inoculator, ever gets re-infected with an artifact of APT or malware, or if that APT artifact shows up somewhere else in the enterprise, Inoculator will detect the reoccurence and alert the user.

Inoculator™ 1.5 can scan the enterprise multiple times a day for known threats including known Zero-Day, intrusion artifacts such as registry keys and families of APT threats. Using this technology, organizations can create their own private threat database to quickly scan for threats targeting their specific business environment. Inoculator is now available as a stand-alone product and is available as a software package or as an appliance.

Inoculator With Active Defense and Digital DNA:

When used together, HBGary Inoculator and flagship product, Active Defense with Digital DNA, provide the most effective, comprehensive detection and analysis of targeted threats today. It is an advanced enterprise technology that can conduct agentless scans for known cyberthreats.

With HBGary’s flagship product, Active Defense™ with Digital DNA, organizations can monitor host physical memory, raw disk, and live operating systems concurrently across the enterprise to get an unprecedented view of host-level, new and unknown threats. When used together, Inoculator 1.5 and HBGary Active Defense™ with Digital DNA offer the most effective, comprehensive detection and analysis of targeted threats today.

“The agentless nature of Inoculator’s scanning technology provides the user with an unprecedented level of APT detection and remediation capabilities for the entire enterprise network, without having to burden the individual end-nodes or system administration staff.

Inoculator automatically identifies machines on the fly as they join and leave the enterprise network, and can assess each machine for indicators of active APT components and artifacts -- even if the machine is only on the network for a small portion of the day,” said Shawn Bracken, Chief Scientist for HBGary, Inc.

Key Benefits:

· Automatically detects known APT components and artifacts on the fly

· Allows organizations to remediate APT attacks on their own. Many organizations do not like to share their malware because it tips the criminals off that they know about it.

· Easy-to-deploy with almost zero impact on end-node and network performance.

· Beta versions of Inoculator 1.5 have found previously undetected APT in numerous organizations.

How It Works:

Inoculator™ 1.5 was created for those environments that need to be scanned quickly. For example, it can be used in a consulting engagement to show where to start the process without the burden of installing thousands of agents.

Inoculator™ 1.5 is able to remotely and automatically find some of the most advanced state-sponsored threats out-of-the-box today with no additional supplied user data besides domain credentials. In addition, Inoculator™ 1.5 also allows the user to specify specific APT artifact components from previous incidents (such as known bad files, regkeys, processes, etc.). If a machine under the protection of Inoculator ever gets re-infected with an artifact of APT or malware or if that artifact of APT shows up somewhere else in the enterprise, Inoculator™ 1.5 will detect the reoccurrence and alert the user.

The HBGary Advantage Against APT and Other Targeted Threats Inoculator™ 1.5 is part of HBGary’s dynamic defense technology platform. Like a radar system for your network, Inoculator is designed to alert you to potential known threats. If Inoculator detects a malware or other APT infection, then a deep-dive analysis is needed with Active Defense™ with Digital DNA.

Active Defense™, which uses HBGary’s patent-pending core technology Digital DNA, can scan thousands of end-nodes concurrently for unknown threats and provide critical threat intelligence such as:

The type of exploit tools used in the attack Information on how the attacker moved laterally within the network Credentials that have been compromised and potentially even what data has already been stolen Rootkits and stealth technologies that are not seen on the disk or by the operating system