Threat Hunting in the SCinet NOC

For the SC18 Conference, Gravwell provided our data analytics platform to the SCinet Network Security team to successfully stop continuous internet attacks automatically, using less hardware and resources than had been required in previous years. Responsible for securing a network of $52 million in contributed hardware, software, and services, plus 4.02 Terabits per second of external capacity, the SCinet team needed to protect the massive amount of data and assets from the outside and the inside.

$52M in hardware, software and services protected
World’s fastest temporary network at 4.02 Terabits per second
4.6 billion entries ingested
>1 Terabyte in source data
4,281 manual searches
17,325 automated searches
1,159 dashboard views
67 miles of fiber optic cable

The full story is both interesting and, dare we say it, pretty cool. Read the case study to discover how the SCinet Network Security team leveraged Gravwell to automate analysis, speed up the investigation, and free up analysts to respond against an actual attack in real-time that would have been devastating had it not been stopped. Download the Case Study for detailed information about the event and follow along with the threat hunt for yourself.

Developed dynamic dashboards to monitor activity as events unfold

Expedite investigations and automate analysis

Protect against real-time attacks against data and assets

Download

Gravwell in the SCinet NOC

Like the SCInet Network Security Team, you too can use Gravwell to:

Developed dynamic dashboards to monitor activity as events unfold

Expedite investigations and automate analysis

Protect against real-time attacks against data and assets

Ingest massive amounts of data without issue and without limits