Endpoint/Device Security, Content, MSSP

Secureworks, Carbon Black Confirm Endpoint Security Integration

Secureworks, a Top 100 MSSP, now uses Red Cloak behavioral analytics in conjunction with the Carbon Black Cb Predictive Security Cloud (PSC) endpoint protection platform.

The news surfaced at Carbon Black's Connect 2018 user conference in New York today, and comes less than two weeks before the Secureworks Access 2018 cybersecurity community conference in Atlanta, Georgia.

The combination of Secureworks' behavioral analytics with Carbon Black's unfiltered PSC data enables the companies to identify and address known and unknown cyberattacks against their joint customers, according to a prepared statement.

A Closer Look at Red Cloak and PSC

Red Cloak is an advanced endpoint threat detection (AETD) service, Secureworks stated. It enables organizations to use sensors to search for forensic evidence of malicious activity and collect information about what is happening on end user devices.

Furthermore, Red Cloak leverages Secureworks Counter Threat Unit (CTU) threat intelligence to detect zero-day threats and other advanced malware, according to the company. It also pinpoints compromised endpoints and helps organizations streamline incident response and remediation.

PSC captures, records and analyzes unfiltered endpoint data, Carbon Black indicated. It supports a variety of Carbon Black endpoint security services, including:

  • Cb Defense: Uses predictive models to analyze endpoint data and uncover malicious behavior to stop cyberattacks.
  • Cb LiveOps: Enables organizations to ask questions of all endpoints and remediate security issues in real-time.
  • Cb ThreatHunter: Delivers threat hunting and incident response capabilities.
  • Cb ThreatSight: Offers managed threat hunting and triage.

PSC generates intelligence from data collected across millions of endpoints in real-time, Carbon Black noted. By doing so, PSC helps organizations address all aspects of the endpoint security lifecycle.

Secureworks Launches Red Cloak Partner Program

Ahead of today's announcement, Secureworks last month launched the Red Cloak Partner Program for channel partners.

The program allows partners to leverage Red Cloak telemetry and intelligence in conjunction with partners' existing offerings, Secureworks indicated. It also enables channel partners to use Red Cloak to conduct threat hunting searches and view threat actor activity across customer endpoints.

Secureworks today provides managed security services to more than 4,400 customers worldwide. The company recorded $468 million in total revenue in fiscal year 2018 and projects its total revenue will fall between $518 million and $520 million in FY19.

Dan Kobialka

Dan Kobialka is senior contributing editor, MSSP Alert and ChannelE2E. He covers IT security, IT service provider business strategies and partner programs. Dan holds a M.A. in Print and Multimedia Journalism from Emerson College and a B.A. in English from Bridgewater State University. In his free time, Dan enjoys jogging, traveling, playing sports, touring breweries and watching football.