ddLoginGallery
SISA logo
Slider

SISA Dhi

The award-winning reverse engineered forensics threat hunting process automated using inhouse developed machine learning Algorithm, SISA Dhi can help you find the true positives with assisted human intelligence.

SISA Dhi, a tailored learning algorithm for new and advanced threats of today’s cyberwarfare

Most businesses were caught flat-footed, both by regulators and loyal customers, as cyberattacks took on the headlines. Information systems were under constant threat of attack. In this bleak context – and in general – it is an imperative for businesses to have machine learning based cyber defence in the right time and be able to identify when a breach occurs.

By doing this, businesses will be able to detect true positives with context. SISA Dhi is the proprietary artificial intelligent algorithm that is a part of the SISA EoT Suite forming the backdrop of SISA Synergistic SOC solution.

And with SISA Dhi businesses can:

Check

Proactively identify and prioritize potential incidents to accelerate investigation process
Check

Reduce the alert volume based on distributed contextual learning algorithm
Check

Enable faster true positive identification leveraging machine learning based risk scoring system through the correlation of:

  • DNS Anomaly
  • Web Anomaly
  • NetFlow Anomaly
  • UEBA
Book a Demo Session

Identify. Prevent. Detect. Respond. Done smartly and intelligently.

For a business to embrace disruption safely, it must be smart and intelligent – on the face of arising advanced threats. See why organizations around the world use SISA Dhi for a wide range of detection use cases.

Check

SISA Dhi’s analytics platform utilize an array of workflows for detection purposes.
Check

SISA Dhi includes a set of machine learning algorithms and anomaly detection rules to profile user activity and network for processes and executables.
Check

SISA Dhi would apply a range of behavioural-based and historical threat detection methods which would include corelation of IoCs and IoAs, and pattern-matching techniques to identify suspicious activities thus providing risk based true positives.

With SISA Dhi, intelligence takes many forms across multiple capabilities

Leveraging deep wells of Analytics data, Dhi empowers business leaders to detect threats in early stages of the threat lifecycle, thus enabling organizations to identify, improve and escalate incidents on a faster scale using some of Dhi’s underlying modules.

Check

DNS Anomaly engine

  • Identifying DNS by means of reverse lookup and classifying those on the basis of ranking
  • Identifying anomalies from the ability of human readable names, helping increase the chance in threat rating for domain names
  • Dhi engine does this for all names and IPs of a given network, thus helping narrow down the true positives of threats and threat vectors
Check

Web Anomaly Engine

  • With increase in web application threat actors/vectors and risks from OWASP top 10, monitoring and identifying true positives from millions of web app requests and response is simplified using the SISA Dhi Web app anomaly detection engine
  • The engine’s capability ranges from tracking various indicators of the web application log including request type’s size, length, timelines and user information which are correlated and enhanced.
Check

NetFlow Anomaly Engine

  • NetFlow contains information of detailed communications to analyse and arrive at true positives for tracking lateral movement and is enabled by the SISA Dhi which tracks various indicators of bytes, direction of communication, threat intel, and others.
Check

UEBA Engine

  • It is of utmost importance to track the organization’s core and Its user activities at the right timelines and identify anomalies based on object access and behaviours to enable true positive identification at scale. SISA Dhi helps track and suggest alerts and receive feedback for improvement of alerting engines.

Request a call


Menu

Subscribe to SISA's newsletter