Alert Probe by Telesoft Technologies provides full network visibility to detect and alert on indicators of compromise. It ingests and enriches network traffic entirely unsampled, creating real-time alert records when a potential threat or anomaly is detected across any network session. Alert Probe utilizes JA3/JA3S fingerprinting for encrypted traffic analysis without decrypting TLS/SSL traffic, generating hashes from the initialization packets of TLS, SSL, and SSH flows. It offers front-end layer 7 enrichment to detect anomalies across network activity, including BGP, SSL, DNS, SIP, HTTP Host, and HTTP URI information. Alert Probe can monitor up to 25Gbps of line-rate data per virtualized appliance and 400Gbps per 1U hardware appliance. It integrates easily with third-party systems, requiring minimal resources for monitoring and threat detection. Alert Probe provides actionable intelligence by analyzing monitored traffic against integrated threat intelligence feeds, grouping assets by IP into entity sets, and aggregating activity targeting assets within the same set over a similar timeframe to streamline remediation and enhance detection capabilities. Available in both software and hardware, it enables visibility for deep threat analysis across the network. Alerts and IPFIX records can be passed up to a third-party SIEM for rapid analysis and remediation.
