Network Security

Advanced Threat and Breach Detection

While most businesses today focus on dealing with external cyber threats, internal risk factors are often overlooked in the process. Some of the common internal security vulnerabilities, which often go unnoticed, happen inside the network and behind security measures like firewalls and anti-virus or anti-malware software. These are known as insider threats.

CLIRSec by CyberHunter offers 24/7 Advanced Threat and Breach Detection for MS Windows networks that specifically focuses on the insider threat that is ignored by most security solutions. This service is focused on Small and Medium Business (SMB) and all you need to get started is a free MS Windows workstation or VM inside your organization.

CLIRSec will continuously hunt, analyze and detect insider threats such as:

Unauthorized access to confidential or sensitive computers
Unauthorized logins to IT infrastructure (e.g. servers)
Unauthorized new users added to the Windows domain
Anomalous and suspicious logins to computers
Unusual login hours for daytime workers
Systems requiring critical software patches
Vulnerabilities inside the network that are exploitable by hackers
Unexpected changes to internal networks (including wireless)
Connections to unauthorized wireless networks
Storage of credit card information, personal information (PII), health information (EPHI) or other sensitive data
Unauthorized Windows Registry changes
Spyware, Trojans, Keyloggers that may be present