Cyber Threat Intelligence

Utilizing frontline threat intelligence from handling thousands of cyber incidents every year, our team can deliver more visibility against emerging threats and offer actionable steps to minimize risk and protect against operational and reputational damage. Our experts bring their combined experience in the U.S. Secret Service, the FBI, Fortune 100 and the National Cyber Forensic Training Alliance (NCFTA) to follow even the most obfuscated or opaque data trails.

Kroll cyber threat intelligence analysts cross-correlate a variety of open source, private feeds and dark web data with frontline data collected from thousands of annual incidents worked on by Kroll experts, filtering out false positives, duplicates and general noise. This unique formula enables timely, meaningful and actionable intelligence that empowers more efficient hunting, improves threat detection, provides domain monitoring, helps in complex litigation, and can preserve organizations’ operations and reputations.

Cyber Threat Hunting

Utilizing Kroll’s proprietary technology and enhanced hunting model, our threat analysts can rapidly search and pivot on TTPs, IOCs and emerging threat indicators to quickly identify possible threats seen across various environments. Our cyclical hunting model follows six steps:

• Data gathering (threat intelligence)
• Hypothesis formation
• Hunt scoping
• Hypothesis testing
• Novel threat identification and threat neutralization
• Review

Threat Intelligence Reporting

Through Kroll’s global intelligence intake, our team gathers and analyzes data to determine trends in the market and deeply understand the most popular and common cyber threats in today’s landscape.

Our team aggregates and breaks down data to provide the most helpful insights. 

Enhance Investigations and Malware Analysis

Kroll’s threat intelligence services can provide further insight both before, during or after an incident. Our experts can help assess your exposure through advanced threat monitoring or help determine the scale of exposed data from a breach.

In conjunction with our threat intelligence insights, our analysts deliver actionable findings through in-depth technical analysis of benign and malicious code. We are able to not only identify and monitor for threats but also reverse engineer malware and provide triage analysis of any code-related event in order to enhance our recommendations for investigative next steps. Our Threat Intelligence team is your ultimate partner when it comes to assessing your organization’s exposure.

Threat Intelligence in a Cyber Risk Retainer

Threat intelligence can provide important insight into your organization’s exposure or help understand your digital footprint in your industry. Kroll clients can package threat intelligence services with Kroll’s cyber risk retainer, which gives you prioritized access to elite investigators and the flexibility to allocate incident response resources as well as all other cybersecurity solutions offered by Kroll.