RSA and Bit9 team to accelerate cyber forensics investigations

Bit9 announced an agreement with RSA to integrate Bit9’s cloud-based software reputation service with RSA NetWitness Spectrum Live service.

Under terms of the agreement, the Bit9 Cyber Forensics Service has been integrated with NetWitness Spectrum Live subscription service, a service that is designed to assist in the identification, analysis and prioritization of malware-based threats to enterprise networks.

The Bit9 Cyber Forensics Service is a trust-based security technology that allows forensics investigators to identify all known good software files on computer systems and helps to focus their efforts on a subset of malicious or suspicious executable files.

The Bit9 Cyber Forensics Service is powered by the Bit9 Global Software Registry (GSR), an authority on software reputation, to help identify, validate and assign reputation to unknown software.

The Bit9 GSR contains billions of records and adds hundreds of thousands of new files every week. Because the average computer contains 20,000 executable files and the average server has 40,000 or more executable files, it is difficult for IT professionals to sift through files and separate the good from the bad, especially when under a deadline during a sensitive investigation.

The service makes it quick and easy to uncover the virtual “needle in the haystack” – the advanced persistent threat (APT). What once was a very large dataset is now reduced, which results in a much more cost-effective investigation.