What is Compromise Intelligence?

Prevailion map image
27 January 2020

Compromise Intelligence is a new method of information gathering sourced from the activity surrounding networks with confirmed evidence of cyber compromise. 

Instead of the conventional perspective of inside-out network visibility, it is outside-out—operating fully outside of an organization’s network, showing the activities of adversaries as they launch assaults on network defenses around the world. 

By tracking sophisticated threat actors and monitoring their command and control (C2) infrastructure, information is collected on what these adversaries are targeting and how their malicious attacks are being carried out.

Organizations can use this intelligence to:

  • Assess third-party risk by seeing compromises cascade through an industry
  • Enrich the information gathering of their existing threat hunting teams
  • Isolate the target of an impending data breach and take preventative action

What makes Compromise Intelligence Different from Threat Intelligence?

The distinguishing characteristic is the level of confidence in the intelligence being conveyed, along with the volume. 

Compromise Intelligence removes the guesswork from noisy feeds of indicators, conveying only confirmed, actionable intelligence on the activity of threat actors. Threat Intelligence encompasses all manner of indicators of potential threats to a network from a variety of sources, whether those are of low-, medium-, and high-levels of confidence. Suppliers of threat intelligence are not concerned with flooding a listener with information, but in providing a comprehensive assessment. It is like having ten thousand new browser tabs that need to be reviewed every day—forever.

The challenge for the listener is to prioritize those threat indicators into an actionable plan. Compromise Intelligence proposes to simplify that challenge by relegating the reported intelligence to only the evidence.

How does Compromise Intelligence Work?

Instead of sifting through endless amounts of data captured on-premises, proprietary beacon technology waits for a dormant threat to signal outbound from an organization, back to its home, where the telemetry (i.e. Compromise Intelligence) is captured and documented. 

Prevailion is the world’s first Compromise Intelligence solution, empowering organizations to swap the traditional roles of victims and adversaries in the dangerous world of cybersecurity. The Prevailion platform is like a search engine for discovering active and historical third-party compromises worldwide. Organizations can set it up in less than a minute and find Evidence of Compromise within their own or third-party ecosystems right away. 

The Latest

Prevailion CEO, Karim Hijazi – Cheddar News- FCC commissioner calls on Apple and Google to ban TikTok app

A member of the FCC renewed urgency calls on Apple and Google to remove TikTok from their app stores, raising concerns that TikTok’s Chinese-based parent company is collecting user data that is being accessed in China.

IRONSCALES Cyber Security Heroes: The New Cyber Era Post Ukraine Invasion

What Wicked Webs We Un-weave

What Wicked Webs We Un-weave: Wizard Spider once again proving it isn’t you, it isn’t me; we search for things that you can’t see Authored by: Matt Stafford and Sherman Smith Executive summary: In late January 2022, Prevailion’s Adversarial Counterintelligence Team (PACT) identified extensive phishing activity designed to harvest credentials for Naver. Naver is a […]

Copyright 2022 Prevailion, Inc. All rights reserved.    

Disclaimer: Gartner “Cool Vendors in Security Operations and Threat Intelligence,” Mitchell Schneider, Ruggero Contu, John Watts, Craig Lawson, October 13, 2020. GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved. Gartner Disclaimer: The GARTNER COOL VENDOR badge is a trademark and service mark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved. Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.