KuppingerCole Names Darktrace a Leader in Network Detection and Response
Summary
KuppingerCole’s 2024 NDR Leadership Compass recognized Darktrace as an Overall, Product, Market and Innovation Leader. Darktrace highlights its AI-driven network detection, investigation and response capabilities.
Key points
- KuppingerCole recognized Darktrace in four leadership categories in its 2024 Network Detection and Response Leadership Compass.
- The article describes NDR as analyzing network traffic across on-premises, cloud, remote, SaaS, IoT and OT environments to identify anomalies and possible lateral movement.
- Darktrace says its self-learning AI detects behavioral anomalies, while Cyber AI Analyst collates incidents to reduce manual investigation work.
- The company says its platform can respond autonomously or through third parties, taking actions based on the affected assets and incident context.
- Darktrace reports that its NDR protected customers against threats including ransomware and data exfiltration; it cites one Gootloader case resolved from detection to recovery in five days.
Article Details
- Event Type
- KuppingerCole recognized Darktrace as an Overall Leader, Product Leader, Market Leader, and Innovation Leader in its 2024 Network Detection and Response Leadership Compass.
- Impact
- The recognition cited Darktrace’s NDR capabilities, including AI-enabled detection, investigation, and response. Darktrace also reports that its products protected thousands of customers from attacks and that, in one Gootloader compromise example, a SOC went from detection to recovery within five days; these are claims made by Darktrace.
People
Malware
BlackCatto unapproved privilege escalation and ransomware including strains like Medusa, Qilin and AlphV BlackCat.Gootloaderto take targeted actions against their threats – even when adversaries pivoted. In one example of a Gootloader compromise, Darktrace ensured a SOC went from detection to recovery within 5 days, 92.8% faster thanMedusafrom data exfil and destruction, to unapproved privilege escalation and ransomware including strains like Medusa, Qilin and AlphV BlackCat.Qilinexfil and destruction, to unapproved privilege escalation and ransomware including strains like Medusa, Qilin and AlphV BlackCat.
Vendors
Products
Darktrace / Incident Readiness & RecoveryDarktrace / Incident Readiness & Recovery, a solution rather than service-based approach to incident response (IR) that lets teams respond in the best way to each incident and proactively test their familiarity andDarktrace / NETWORKDarktrace / NETWORK’s approach is fundamentally different to other NDRs. Continual anomaly-based detection (our Self-Learning AI), understands what is normal across each of your network entities, and then examinesDarktrace / Proactive Exposure ManagementDarktrace / Proactive Exposure Management, which looks beyond just CVE risks to instead discover, prioritize and validate risks by business impact and how to mobilize against them early, to reduce the number of realDarktrace ActiveAI Security Platformwas directed to our innovation. This year has seen several NDR updates via Darktrace’s ActiveAI Security Platform version 6.2 which has enhanced investigation workflows and provided new AI transparency withinDarktrace Cyber AI Analystinnovation around user-led security. Self-Learning AI together with automated triage through Cyber AI Analyst and real-time autonomous response actions have been instrumental to security teams in stopping