Vectra debuts Cognito Recall to provide AI-assisted threat hunting and enable conclusive incident investigations

Vectra, vendor of AI-powered cyberattack detection and threat hunting, announced this week a major expansion of the Cognito platform with Cognito Recall. A comprehensive source of enriched metadata, Cognito Recall empowers highly-skilled security analysts to conduct conclusive incident investigations and perform AI-assisted threat hunting.

Many threat hunting tools enlist manual techniques, suffer from inflexible data retention and access, rely on expensive and proprietary storage, and lack the fidelity and context required for swift and thorough attack investigations.

Cognito Recall rises above these deficiencies by collecting, analyzing and storing as much metadata as needed for forensic investigations and compliance mandates like GDPR. It also empowers AI-assisted threat hunting using high-quality indicators of compromise and provides a chain of forensic evidence behind every cyberattack.

The capabilities of Cognito Recall empowers threat hunters with real-time collection and storage of enriched enterprise-wide metadata, relevant logs and cloud events. Cognito Recall enables threat hunters to leverage their deep knowledge of advance cyberattacks, and enables investigation of device activity. All network metadata stored in Cognito Recall is associated with devices and host names, not just IP addresses, enabling intelligent investigations of any device’s activity over time, regardless of IP address changes.

Cognito Recall provides high-fidelity visibility into the actions of all cloud and data center workloads and user and IoT devices by collecting and storing enriched network metadata, relevant logs and cloud events in real-time. It delivers cloud-powered limitless scale that can store and search metadata for as long as it’s needed while Vectra manages the infrastructure.

“We deployed Cognito Recall and it delivered immediate value,” said John Shaffer, CIO at global investment banking firm Greenhill & Company. “Cognito Recall enabled us to more quickly and thoroughly perform an incident investigation based on endpoint security alerts. It empowered our team to do something in minutes that would normally require days and prevented a risk to our business.”

Cognito Recall and its equally powerful AI counterpart, Cognito Detect, are cornerstones of the Vectra Cognito platform. Cognito Detect automates the real-time detection of hidden attackers in cloud and data center workloads and user and internet-of-things devices while giving Cognito Recall a logical starting point to perform AI-assisted threat hunting as part of the investigative process.

“While working with customers who use the Cognito platform, we found that they face significant operational challenges when conducting manual forensic investigations and threat hunting,” said Kevin Kennedy, vice president of product management at Vectra. “Cognito Recall tackles these challenges by providing the best single high-fidelity source for enriched metadata coupled with tight integration with Cognito Detect. And by leveraging our cloud delivery, customers benefit from limitless scale and zero management overhead.”

 


IoT Innovator Newsletter

Get the latest updates and industry news in your inbox! Enter your email address and name below to be the first to know.

Name