Reveelium by ITrust combines AI, Threat Hunting, Threat Intelligence, and SOAR (Security Orchestration, Automation, and Response) to capitalize on events that may threaten information systems and anticipate threats. It utilizes three complementary engines: Correlation, UEBA (User and Entity Behavior Analysis), and Threat Intelligence. These engines operate on a big data platform capable of processing large volumes of IT and OT sensor data and logs. Reveelium implements over 650 rules, 4 million IOCs, and 10 behavioral algorithms in its business correlator. The interface displays scored threats and tracks deviations, allowing user interaction and feedback. Reveelium's technology is unique in Europe. It integrates the MITRE matrix to specify the tactics and techniques used by the identified threat before it spreads. Reveelium detects advanced threats by identifying deviant or malicious behaviors within information systems using AI algorithms. It enhances log analysis with machine learning and intelligent correlation, allowing real-time analysis of large data volumes to identify current or future threats. Reveelium detects abnormal behaviors of machines and users through its UEBA technology: assets in the system identify relevant and contextualized anomalies. The approach combines machine learning and deep learning methods from academic research in cybersecurity: graph theory, LSTM temporal neural networks, supervised and unsupervised classification algorithms. Reveelium reduces the number of false positives from the information system. It presents a concise overview of threats from identified alerts. This innovative method allows teams to focus solely on the identified threat without wasting time on analyzing numerous often inappropriate alerts. Reveelium in Forensic mode enables offline log analysis for forensic operations or retrospective control of information system activities. In this 'cold log control' configuration, it will be possible to inject logs into a Reveelium lab to ensure that traditional controls do not overlook a cyber threat or deviant behavior that could indicate a cyber attack or internal fraud. Reveelium provides a 360° view of threats, presenting an overview of all impacted assets in your network. It highlights the entire network at risk of propagation, identifies associated IP addresses, and helps prevent further spread. Reveelium identifies the origin and progression of abnormal behavior in the information system and presents its characteristics. It can identify alerts constituting a threat and show the decision-making process that led to the increase in severity of that threat. Once a threat is confirmed, the technology will find similar behaviors in the information system and present potential attack scenarios to mitigate them. The Reveelium graphical interface dynamically maps the tactical and technical dimensions of cyberattacks and quickly identifies the type of a Kill Chain to prioritize and respond without delay. It reduces false positives by 20 times and detection time from an average of 12 months to 1 week. It increases productivity and analysis capacity of supervision teams, reducing data analysis time by 50 for supervisors. It detects anomalies (viruses, behaviors, fraud, leaks, malicious activities) where no other tool can. It is easy to install in SaaS on-premise, backed by a private cloud. It does not require complex installation of other modules. The technology can rely on any existing tool (SIEM, AD, application, etc.). Reveelium's learning mode can be complemented by a SIEM module for clients without data centralization. It is customizable: Create your own detection rules and adapt Reveelium to your IT environment.
