Omnis Cyber Intelligence

As NETSCOUT OCI  instrumentation monitors network traffic in real time, it automatically enhances metadata and packets with NETSCOUT’s patented Adaptive Service Intelligence® (ASI) technology and Active Threat Level Analysis System (ATLAS) global threat intelligence—turning it into “smart data”. Adding this level of context, real-time analytics and threat intelligence turns massive amounts of wire-derived data into actionable insights for efficient cyber threat detection and investigation.

A foundational requirement for cyber security is comprehensive visibility. As modern-day networks include microservice, containerized applications in highly distributed and hybridcloud-based environments, gaining proper visibility has become increasingly difficult. Omnis Cyber Intelligence leverages highly scalable deep packet inspection (DPI), multi-form-factor CyberStream instrumentation to gain comprehensive visibility across an organization’s entire network, including hybrid-cloud environments.

Gaining comprehensive visibility is only the beginning. Adding contextual, real-time analytics and threat intelligence turns massive amounts of wire data into actionable insights for efficient cyber threat detection and investigation. As CyberStream instrumentation monitors network traffic, it automatically enhances wire-based metadata and packets with NETSCOUT’s patented Adaptive Service Intelligence (ASI) technology turning it into “smart data”.

Highlights

Smart Instrumentation
Leveraging highly scalable (1–100 Gbps packet capture rates and up to 128TB of local metadata and packet storage on CyberStream) instrumentation available as COTS and virtual form factors. Omnis® Cyber Intelligence (OCI) gains comprehensive visibility across an organization’s entire network, including hybrid cloud environments.

Smart Data
Threat Intelligence adds context, analytics, and threat intelligence, turning massive amounts of wire data into actionable insights for efficient cyber threat detection and investigation.

Smart Investigation
An intelligent and efficient meta-data and packet retrieval system, along with a dynamic, flexible UI, enable guided contextual or ad hoc unguided investigations to determine the extent of breach and remediation.

• Vulnerability Detection – Advanced Early Warning and Continuous Attack Surface Monitoring that enables security teams to detect vulnerabilities in their environment.
• Threat Detection – Contact Tracing and Back-in-time Investigation enable security teams to detect or verify threats by investigating near-term and long-term network activity.

Integration
Support for Syslog, STIX/TAXII, and a documented API enable OCI to easily integrate into an existing security stack. 

NetOps and SecOps Collaboration
Support for NETSCOUT® InfiniStreamNG®, vSTREAM®, and nGeniusONE® deployments allow OCI to be used by both NetOps and SecOps teams to efficiently detect and investigate cyber threats.