NETSCOUT enhances Omnis Cyber Intelligence platform with MITRE ATT&CK behavioral analytics

NETSCOUT announced updates to its advanced, scalable deep packet inspection-based Omnis Cyber Intelligence Network Detection and Response (NDR) platform.

New MITRE ATT&CK behavioral analytics enable earlier detection of advanced threats like ransomware, suspicious traffic, or unauthorized access attempts while improving remediation to help meet industry and country compliance requirements.

“Digital resilience allows enterprises to continuously operate and quickly leverage digital opportunities to serve their customers, especially during economically challenging times,” stated Fernando Montenegro, senior principal analyst, Omdia. “A mature cyber strategy is key to digital resilience, and comprehensive security controls require organizations to deploy technology such as Omnis Cyber Intelligence to continuously monitor their networks, so they can react to and mitigate threats early before they impact their operations.”

New Omnis Cyber Intelligence enhancements include:

• Tighter alignment with ATT&CK – A new security events dashboard that can easily be toggled to show events aligned to ATT&CK tactics and techniques, enabling security teams to quickly prioritize, investigate, and remediate threats.
• Expanded behavioral analytics – Expanding behavioral analytics at the source allows for the early detection of advanced multi-staged attacks, such as ransomware and unusual network traffic, before major impact occurs.
• Malicious file detection – Known malicious file detection has been added to the Omnis Cyber Intelligence list of multi-dimensional threat detections, enabling it to detect known and unknown zero-day threats.
• Host IP address enrichment – Along with IP address, host and machine name identification has been added to alerts, enabling SecOps teams to accurately identify, investigate, and remediate threats.
• Open Integration Framework – A new open framework that can quickly integrate with third-party solutions such as firewalls, endpoint detection (EDR), and SIEM/SOAR/XDR platforms enables real-time response to incidents, such as blocking malicious IP addresses with firewalls or isolating compromised endpoints.

As organizations seek out new effective and efficient methods to comply with industry or government regulations, such as the EU’s Digital Operational Resilience Act (DORA), which goes into effect on January 17, 2025, they are learning that the network continues to play a strategic role for success.

Omnis Cyber Intelligence’s continuous, scalable deep packet inspection-based network monitoring, tighter alignment with ATT&CK, expanded behavioral analytics, and new open architecture for ecosystem integration helps organizations meet these important compliance requirements and strengthen their digital resiliency.

“NETSCOUT helps its customers strengthen their digital resilience by enabling easier detection, faster response, and more effective recovery from cyber threats,” stated Jerry Mancini, senior director, office of the CTO, NETSCOUT. “The new functionality we’ve added to our Omnis Cyber Intelligence platform helps organizations improve their security posture and better react to an ever-changing threat landscape while supporting compliance and reporting needs.”