Search Results

BackgroundAll Cyber Crucible communications from the endpoint agents to the CC infrastructure is protected by TLS. The list of domains used by CC agents, and each domain’s function, is listed here:Which domains are used by Cyber Crucible?...

Issue Summary A network outage occurring on 6MAR2024 impacted front-end access to the Cyber Crucibledashboard and telemetry access via API. This issue has since been resolved as of 7MAR2024. Root Cause At 0400 UTC on 6MAR2024, telemetry traffic began escalatin...

While all of the Cyber Crucible agent’s behavioral detection and protection happens at the endpoint, without need to submit samples to the cloud for analysis, the endpoint agent still requires a connection to a server to receive licensing ...

What Is Application Whitelisting?Application whitelisting is a concept in which you have a list of programs that are allowed to operate, and anything else is not allowed to function.The most advanced application whitelist technologies will...

Introduction Types of Application Whitelisting - a non-technical description The Obvious & Cumbersome Hall Pass (a good thing) The Generic Hall Pass (probably not a good thing) The Generically Specific Hall Pass The Specific-Specific Ha...

The data collected by the Cyber Crucible agent goes through multiple layers of filtering, in order to cut out noise from having too much raw telemetry. The raw data produced by the kernel sensors is trimmed down [Filter #1] to reduce both ...

Our Data Extortion Prevention software receives behavioral indicators from several engines before making a split-second decision whether an attack is at hand. One of the engines, the file monitoring engine, uses special files in several l...

Introduction How to Opt-in and Opt-out of Receiving Reports Sample Report Content IntroductionExecutive Report Summaries are reports emailed out to users that detail information about users' licenses, agents, and machine behaviors. The ...

Group Setting for Automatically Releasing Inactive Agents' Licenses How Can I Automatically Hide Agents When Licenses are Removed? How Can I Filter for Inactive Agents and Release Their Licenses Myself on the Agents Page? How Can I Filte...

Manage Group Update Settings Manage Agent Update Settings Manage Group Update SettingsGroups have auto-updating enabled by default and agents follow their group update settings by default. Group update settings can be seen on the Groups...

Canary files have special data hidden in them, in the event they are ever stolen by an attacker. Cyber Crucible can trace the file back to the original owner.The file names are mostly-random (called psuedo-random) in a way that attackers ...

Remove License on the Agent Licenses Page Remove License on the Agents Page Change Behavior of Agents When Their License is Released Removing a license is painless.The software will no longer stop any data extortion attacks after the li...

How do I view if an agent has a license assigned? How do I assign an agent a license? How do I view if an agent has a license assigned?During the installation process, an agent will automatically be assigned a license from the group it ...

Canaries are found in various places in your file system.Anytime a new source of files appears on your system, from any possible user, Cyber Crucible automatically checks to see if canaries have already been placed. That includes removabl...