Cybereason¶

Cybereason enables you to fetch and analyze Cybereason Malops and Cybereason Malware Query logs. It identifies malicious operations (Malops) in real-time and provides detailed insights into the attack, including the attack’s timeline, affected users and the root cause.

Cybereason Components

1. Universal REST API Fetcher

   • CybereasonFetcher

2. Compiled Normalizer

   • CybereasonCompiledNormalizer

3. Search Template

   • LP_CybeReason MalOps