Advanced Search
Search Results
2169 total results found
Is This a Monitoring Tool Like My Other Security Dashboards?
The answer is, it depends on how you and your organization wants to use the tool, but probably "no". It is important to note to product design strategies with Cyber Crucible: Protection should be hyper-automated, and not require constant care and...
Does Cyber Crucible have false positives? What is the false positive rate?
Cyber Crucible strives for a 0 false positive product environment. Having said that, there are sometimes false positives. Let’s discuss where these come from. Currently, the false positive rate is approximately 1 response per month, per 1800 deployment...
Does Cyber Crucible test all possible ransomware exhaustively?
Cyber Crucible operates off of kernel level behavioral modeling, to discover data theft, credential theft, and ransomware encryption behaviors very quickly. The behavioral decisions are made using information from process behavior, memory-derived behav...
Does Cyber Crucible co-exist with other security products?
Yes! Cyber Crucible is currently deployed and co-existing with every security vendor on Gartner’s Magic Quadrant. Our software automatically discovers and configures itself to be aware of the other security tools' activities. In the rare event there is ...
What happens if one of my security products has a conflict with Cyber Crucible?
Cyber Crucible currently co-exists with every major security vendor, if we use Gartner’s Magic Quandrant reports as a metric of industry incumbents.Cyber Crucible’s endpoint software is reliably more resilient than other software, and that...
On-boarding Process
Group Management Setting up Agent Security Alerts Agent Installation Planning Best Practices Installing the Agent Update Strategies for Groups and Agents How to Investigate the Root Cause of an Extortion Response Tailored Behaviors Rest Integration Gr...
Deploying to an Already Infected Environment
Background What Happens Immediately Upon Install What Happens to Dormant Malware, Waiting for Future Tasking? Additional Details - Reboots Can Be Valuable Background Cyber Crucible customer deployments routinely result in discovery of previously unkno...
How to Install Cyber Crucible
Cyber Crucible installation is painless. Login to the web application at https://dashboard.cybercrucible.com Go to the Agents page, and click on the Download Agent button. After you click the button, the following modal appears: Select the gr...
Security Notification Management
Introduction How to Create a Security Notification How to Delete a Security Notification How to Turn a Security Notification Off Without Deleting Introduction Security Notifications are alerts emailed out to users detailing security related eve...
Endpoint Agent Version Index
4.4.0.94.4.0.9.14.4.1.04.4.1.14.4.1.24.4.1.34.4.1.44.4.2.04.4.2.14.4.2.24.4.2.34.4.2.44.4.2.54.4.2.64.4.2.74.4.2.84.4.3.04.4.3.14.4.3.24.4.4.04.4.4.44.4.5.14.4.5.24.4.5.34.4.5.44.4.5.54.4.5.64.4.5.74.4.5.84.4.5.94.4.6.04.4.6.14.4.6.24.4.6....
How do I test the TLS connection to these domains?
Beyond just pinging the domains used by Cyber Crucible to make sure that your endpoint can reach all of the correct network address, the Cyber Crucible Agent installer includes a test argument that ensures a valid TLS/SSL connection can be...
Why Cyber Crucible needs CRL/OCSP certificate access
BackgroundAll Cyber Crucible communications from the endpoint agents to the CC infrastructure is protected by TLS. The list of domains used by CC agents, and each domain’s function, is listed here:Which domains are used by Cyber Crucible?...
06 March, 2024
Issue Summary A network outage occurring on 6MAR2024 impacted front-end access to the Cyber Crucibledashboard and telemetry access via API. This issue has since been resolved as of 7MAR2024. Root Cause At 0400 UTC on 6MAR2024, telemetry traffic began escalatin...
Why might I need a proxy?
While all of the Cyber Crucible agent’s behavioral detection and protection happens at the endpoint, without need to submit samples to the cloud for analysis, the endpoint agent still requires a connection to a server to receive licensing ...
Does Application Whitelisting work?
What Is Application Whitelisting?Application whitelisting is a concept in which you have a list of programs that are allowed to operate, and anything else is not allowed to function.The most advanced application whitelist technologies will...
What is Application Whitelisting?
Introduction Types of Application Whitelisting - a non-technical description The Obvious & Cumbersome Hall Pass (a good thing) The Generic Hall Pass (probably not a good thing) The Generically Specific Hall Pass The Specific-Specific Ha...
How much data is produced by Cyber Crucible?
The data collected by the Cyber Crucible agent goes through multiple layers of filtering, in order to cut out noise from having too much raw telemetry. The raw data produced by the kernel sensors is trimmed down [Filter #1] to reduce both ...
What are these strange, random looking files I see?
Our Data Extortion Prevention software receives behavioral indicators from several engines before making a split-second decision whether an attack is at hand. One of the engines, the file monitoring engine, uses special files in several l...