UltraViolet Cyber Launches Equinox Detection-Coverage Platform
Summary
UltraViolet Cyber launched Equinox, which assesses SIEM and EDR detection and log-source coverage against MITRE ATT&CK and ATLAS. The company says a customer trial raised mapped coverage from 26.6% to 61.3% without more alerts.
Key points
- Equinox uses AI and automation to assess existing detections and log sources across customer SIEM and EDR tools in under 30 minutes.
- It maps coverage against MITRE ATT&CK and MITRE ATLAS, including techniques targeting AI and machine-learning systems.
- The platform recommends vendor or custom detections and potential log-source improvements to address identified gaps.
- UltraViolet says its TIDE engineers review and backtest each recommended detection against customer data before approving deployment.
- In a customer trial, the company reports mapped coverage increased from 59 of 222 techniques (26.6%) to 136 of 222 (61.3%) after recommended detections were implemented, with no increase in alert volume.
- The article cites independent industry research estimating average enterprise coverage at 21% of MITRE ATT&CK techniques.
Article Details
- Event Type
- Launch of Equinox, a detection engineering platform.
- Impact
- Equinox uses AI and automation to assess and map customer SIEM and EDR detections and log sources against MITRE ATT&CK and MITRE ATLAS, identify coverage gaps, and recommend detections. UltraViolet Cyber says TIDE engineers review, backtest, and approve recommendations before deployment. In a customer trial, coverage increased from 59 of 222 techniques (26.6%) to 136 of 222 (61.3%) without increasing SOC alert volume.