“Advanced persistent threats (APTs) are a major concern for organisations across all industries because they are particularly sophisticated and stealthy, as well as their ability to leverage insider information,” said Brad Hibbert, CTO, Beyondtrust. “Malware is often used in APTs, as criminals exploit vulnerabilities on systems and feed stolen data back to their home base. Beyondinsight 5.5 represents a step forward in active malware identification, empowering our customers with the ability to flag emerging APTs and proactively contain data breaches.”

The new malware analysis capability in Beyondinsight 5.5 comes standard with BeyondInsight-supported solutions, including Powerbroker for Windows, Powerbroker Endpoint Protection Platform and Retina CS Enterprise Vulnerability Management.

The malware analysis capability correlates aggregated data from the above solutions with information about emerging and persistent malware threats observed worldwide. The data is then organised by malware risk and linked to assets identified with offending hashes within Beyondinsight 5.5. Behind the scenes, information is processed anonymously in the cloud so all clients can benefit from the first time anyone, anywhere, experiences a new potential threat. This helps users to uncover APTs in the organisation, pinpoint specific at-risk systems, report on the findings and take action to eliminate the threat.

In addition to malware analysis, updates in Beyondinsight 5.5 add support for new data inputs and exports, further informing security decisions made both inside and outside of BeyondInsight. These include Syslog and SNMP connectors for forwarding event data to third-party solutions, Beyondtrust Powerbroker Password Safe password management data for BeyondInsight Clarity threat analysis, Beyondtrust Powerbroker for Windows file integrity monitoring reports for viewing in the Analytics and Reporting console.