Spyderbat’s Behavioral Context Web proactively captures contextual data to ensure that every event is linked to what came before, and what happened after. With this understanding of all the activities leading up to and following security events, Spyderbat flips the script to determine the veracity and impact of security alerts as they occur, rather than in post-alert manual analysis.
The Behavioral Context Web utilizes eBPF technology embedded in modern Linux kernels to:
- Continuously gather and observe system behavior.
- Monitors process lifecycles, network connections, and file activities.
- Create a causal graph that pinpoints risk with all related context.
Spyderbat transforms eBPF into actionable, human-readable traces for organizations to enhance their security posture, mitigate risks, and protect their assets in real time.
By automatically connecting disparate activities into causally-linked traces, the Behavioral Context Web quickly determines the legitimacy of security alerts, reducing false positives. At the same time by automating the corroboration of security alerts, Spyderbat allows for more signals to simultaneously reduce false negatives as well.
