UltraViolet Cyber turns weeks of detection engineering into a 30-minute scan
Managed security services provider UltraViolet Cyber Inc. today launched Equinox, a detection engineering platform that grades how much of the known attacker playbook a customer’s existing security tooling would actually catch. Equinox inventories the detection rules and log sources a customer already runs across its security information and event management platform and endpoint detection and…
UltraViolet Cyber has introduced Equinox, a detection engineering platform designed to quickly assess how effectively existing security tooling detects known attacker techniques. The platform analyzes a customer's Security Information and Event Management (SIEM) platform and endpoint detection and response (EDR) tools, mapping their detection rules against the MITRE ATT&CK framework.
This process, which would typically take detection engineers weeks, is now completed in under 30 minutes. The result is a coverage map, scorecard, and list of recommended vendor or custom detections to address any gaps. The platform's Threat Intelligence and Detection Engineering team reviews each recommendation and backtests it against the customer's telemetry before deployment.
A separate log-source gap report quantifies the additional coverage each new data feed would provide, offering clients a case for telemetry investment. UltraViolet emphasizes that Equinox confirms whether a detection can actually fire in real-time, distinguishing a coverage dashboard from actionable coverage for audits. One trial showed Equinox identified a path from 59 to 136 covered techniques, a 34.7% improvement, without increasing alert volume.
The company is the first to provide a full coverage map and scorecard for MITRE ATLAS, a framework focusing on adversary behavior in AI and machine learning systems. Managed customers receive Equinox at no extra cost, integrated into UltraViolet's managed security operations center service during onboarding and quarterly thereafter.
Organizations with in-house SOC teams can purchase Equinox as a standalone engagement. The platform currently supports tooling from SentinelOne, CrowdStrike, Elastic, and Panther Labs, with plans to add support for Splunk and Microsoft Defender. UltraViolet Cyber, founded in April 2023 through the acquisition of Metmox, Mosaic451, Stage 2 Security, and W@tchTower, is headquartered in McLean, Virginia. The company ranks No. 19 on MSSP Alert's Top 250 list of managed security services providers.
Written by urgent.news from SiliconANGLE's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
