AI-driven Darktrace HEAL helps businesses manage cyberattacks
Darktrace has announced Darktrace HEAL, an AI-enabled product to help businesses prepare for, remediate, and recover from cyberattacks more effectively. HEAL provides security teams with abilities to simulate real attacks within their own environments, create bespoke incident response plans as cyber incidents unfold, and automate actions to rapidly respond to and recover from those incidents. Security teams are expected to flawlessly manage incident response in the face of a live, rapidly unfolding, often novel attack, usually without any realistic practice. They are expected to make decisions quickly based on potentially hundreds of changing and uncertain data points and factors. In a recent ransomware incident*, analysts would have needed around 60 total hours of investigative work to build a complete understanding of the full scope and varied details, even though the malicious activity unfolded in10 hours. The pressure and complexity facing these teams is only po...