擴大安全戰略的範圍

內部威脅遊戲計劃
如果沒有內部威脅遊戲計劃，企業將在其安全戰略中留下一個巨大的漏洞。公司檢測數據洩露所需的平均時間超過五個月！如果您有需要保護的關鍵數據，那麼擁有不完整的內部威脅策略會使您的公司處於嚴重危險之中。
主動端點可見性和分析
由於高達60％的漏洞來自內部威脅，因此企業主動監控所有端點以快速檢測內部漏洞至關重要。可以在Windows，MAC，Android設備以及Windows服務器上部署腦代理（攻擊者冒充內部人員的主要目標，利用受損的憑據）。Cerebral保護物理和虛擬化端點。
單獨檢測不夠
數據洩露響應（DBR）對於最大限度地減少違規的影響至關重要。警報響起後，您能以多快的速度做出反應？Cerebral的Time-Capsule DVR讓我們可以看到事件的視頻。這種可見性使您可以立即描述真實威脅的錯誤警報，並立即採取行動，100％放心。

AI POWERED
集成和智能
用戶活動監控（UAM）+用戶和實體行為分析（UEBA）+數據違規響應（DBR）

Cerebral監控端點上的所有用戶活動，包括： 

大數據和人工智能
網絡上所有用戶的第二次信息收集創建了一個大數據場景，即便是最好的安全團隊也無法篩選。這就像在成千上萬的不斷變化的草垛中尋找一根針。

Veriato AI（UEBA）持續仔細檢查所有用戶的活動和情緒，觀察與他們的個人基線或組的基線相比的行為異常。

此外，Cerebral將監視嘗試使用被盜憑據訪問網絡的外部人員。

警報
立即通知
當Cerebral識別出可能存在的威脅時，它會立即通知安全團隊。具有極低的誤報率（<2％）。Cerebral的警報通過消除讓人們不斷監控員工，希望找到問題的需要，最大限度地提高了安全團隊的效率。

由於平均違規檢測時間超過五個月，很明顯很多公司都沒有收到違規警報。最終目標是將受損數據安全地保存在內部，警報對於快速鎖定漏洞至關重要。

立即看到發生了什麼
收到警報後，Cerebral的Time-Capsule DVR使您能夠直接查看用戶屏幕的視頻。

當用戶打開文件，下載數據或瀏覽互聯網時，能夠看到用戶將鼠標移動到屏幕上，這對於快速確定用戶的行為是良性的，危險的錯誤還是故意惡意是非常寶貴的。您可以向後滾動並查看用戶在5分鐘，5小時或5週前做了什麼，讓您：

•  以100％的信心快速行動
• 查看違規的程度
• 查看攻擊策略
• 看看他們的內部或外部同謀是誰

數據洩露響應（DBR）
以速度和信心回應
一旦發現漏洞，Cerebral的視頻播放可讓您立即做出反應並100％放心。沒有更長時間的調查來確定網絡警報的實際含義。您可以在幾分鐘內做出反應，通知人力資源，管理，運營安全甚至執法。此外，從幾天，幾週或幾個月前查看視頻的功能允許您調查攻擊策略以及識別組織外部和內部的共犯。

採取法律行動
圖片勝過千言萬語，這在法律體系中更為真實。腦屏錄像可以作為帶時間戳的圖像或視頻文件導出，為公司間的紀律處分和法律訴訟提供重要證據。Veriato的詳細日誌，報告，圖像和視頻證據已被全球數百個案例用於成功起訴惡意內部人員。

人為因素
人類始終是任何安全策略中最薄弱的環節，因此用戶端點監控對於內部威脅安全至關重要。
可以在Windows和Mac工作站，Windows服務器以及Android設備上部署腦代理。它們可以部署在物理或虛擬化環境中。
因為這是我們真正關注的用戶活動（而不是設備），所以Cerebral將跟踪用戶從一個設備到另一個設備，從而為所有用戶創建一個跨平台，網絡範圍的分析。

Minimum Server requirements
Refer to The Veriato Server in this guide for more details. If you will be managing more than 500 devices, please consult your salesperson or a Veriato Technical Support specialist for optimal system requirements.

• Operating System - Microsoft® Windows® OS x64 or x86:
  • Windows 10
  • Windows 8, Windows 8.1
  • Windows 7 SP1
  • Windows Server 2012 R2
  • Windows Server 2012
  • Windows Server 2008 R2 SP1
  • Windows Server 2008® SP1 & SP2

or any virtual machine (VM) that meets OS and disk space requirements. See the important notes below.    
NOTE: Do not attempt to install the Veriato Server on a "Home" edition of Windows OS.
Do NOT install on a device where the following are installed:
- MS SQL Server 2005/2008 Standard or Enterprise 
- MS SQL Server Express Management Studio 
- MS Exchange Server or Domain Server  

• Processor -  Intel-compatible, 1 GHz or faster.
• RAM - Minimum 4 GB.
• Configuration - Uses Native English language (to run SQL Server)
• Uses the NTFS (not FAT32) file system
• Static IP address is recommended.
• Free hard disk space - Install to a local hard drive with:
• 60 GB - minimum for Veriato 360 servers and SQL Server database
• 100 GB - recommended for Veriato 360 ongoing data storage and monitoring (assume 50 MB per user per month)  
• Prerequisite Software - Microsoft® SQL Server® Express and other non-OS prerequisites are provided with the setup  Depending on your machine configuration, you may be prompted to install Microsoft .NET 3.5 and other components  (see The Server).
• Administrator credentials -  Log in as an Administrator user on the local computer to install Veriato 360.

IMPORTANT: Veriato 360 will not install to RAM or to a read-only, mapped, compressed, or removable drive. If the setup cannot determine the drive type, installation will not be allowed.

Server notes

• Windows 8 and Windows Server 2012 
  Windows 8 and Windows Server 2012 require a Microsoft hotfix (due to an IExpress issue) to allow deployment of the Recorder Windows Vista, or Windows Server 2008 clients. Download the hotfix from Microsoft and install it on the Veriato 360 server before deploying Recorders (read more). These platforms may prompt for installation of .NET 3.5 to support Veriato Database functionality.
• Windows Server 2008 and Windows 7 
  If necessary, the setup will prompt for the required Service Pack: SP 1 for WIndows 7 and SP 1 & 2 for Windows Server 2008. After downloading and installing the package from Microsoft, restart the setup.
• Windows Server 2008 IE Support  
  Windows Server 2008 does NOT support the Internet Explorer 10 browser. This browser limitation means that Veriato Recon Alert Profiles and the Behavioral Groups chart, which use IE within the application, will not be available. If you plan to use Recon, and if installing on another OS is not an option, install a Veriato 360 Control Center and Dashboard on a device that does support IE 10. The remote Control Center will allow you to manage Recon Alerts, and the Dashboard will display the Behavioral Groups.   
• Windows SBS 2011  
  Veriato 360 setup will prompt for the required Service Pack, if needed. Cancel out of the setup, download and install Windows Server 2008 R2 Service Pack 1 from Microsoft, and then restart the setup (read more).    
• Antivirus exceptions
  Before installing, create or update exceptions in your antivirus solution based on the files listed in Exclude the Server from Scanning. You may want to disable antivirus scanning while installing the server.

Upgrading the server

• Operating System
  Note the Windows Server 2008 limitations above: If Veriato 360 currently runs on a Windows Vista or Server 2003 machine, plan for installing the upgrade on a machine that meets the above OS requirements. See "Moving the Server Installation" in the Veriato Administrator Guide.   
• Upgrade from 8.3  
  You can install over your current installation if you are currently using Veriato 360 version 8.3 or greater.  If you are using an earlier version, contact Veriato for assistance.
• 23 GB -  Minimum disk space to upgrade to 8.5.

Recorder requirements

• Make sure endpoint computers meet the following requirements before installing the version 8.5 Recorder:
  • Windows - Windows x64 or x86:
  • Windows 10
  • Windows 8, 8.1
  • Windows 7
  • Windows Vista®
  • Windows Server 2008
  • Windows Server 2012
• Mac - Mac ® OS® X 10.9 and greater:
  • Mavericks
  • Yosemite, or
  • Mac OS X Server
• Network access to server - Windows Domain, Workgroup, Novell®
• Other environments - You can deploy to hosting servers and virtual machines that meet OS and space requirements.
• Veriato Recon - 1 GB free disk space to lock 1 month's data at the device, .NET 4 installed at the client computer.   
• Veriato 360 - 15-50 MB free disk space per day to temporarily store data before uploading.

Recorder notes

• Unsupported Recorder versions
  If you are upgrading. Veriato 360 will no longer support any Recorder version 8.2.x or older. Because the licensing process has changed, these Recorders can no longer receive a license or return data. Before you upgrade to version 8.5, be sure to upgrade all Recorders!
• Unsupported OS platforms
  The Control Center will cancel any Recorder installation to any non-supported OS platforms. You can find a record of cancellations in the Control Center Server log.   
• .NET requirement
  Windows clients. Veriato Recon requires .NET Framework 4.x installed on all client Windows OS platforms for user behavioral analysis. The .NET prerequisite is provided with Windows 10, 8, and Server 2012 operating systems. Any client licensed with Recon where .NET 4.x is not detected will be highlighted in the Control Center. To install .NET 4 when deploying Recorders (if it is not found), you can enable a setting in Tools | Options in the Control Center.
• Antivirus exceptions
  Before deploying the Recorder, create or update exceptions  in your network antivirus solution based on the files listed in Exclude the Recorder from Scanning.

Veriato Investigator
Employee Investigations
A solution for temporary focused investigations that installs quickly, records detailed information on employee activity, and enables fast, accurate, and efficient exploration and playback of the recorded data. Veriato Investigator provides the answers you need so informed decisions get made.

Veriato RansomSafe ™
是您勒索軟體防禦中的重要一層，它將即時數據保護與多種機制相結合，可以在攻擊成為業務人質之前對其進行檢測和關閉。

保護
如果勒索軟件到達您的文件服務器，Veriato RansomSafe ™ 會在數據加密之前檢測到攻擊並將其關閉。

故障安全備份
RansomSafe ™ 在更改文件之前對其進行備份，並對文件的最新版本進行原始復制。

快速恢復
一旦攻擊中斷，只需點擊幾下即可在幾分鐘內恢復。沒有廣泛而昂貴的停機時間。