Bit9 + Carbon Black Incident Response Program Signs 40 IR Firms and Trains over 400 Professionals

May 19, 2015 - PRLog -- Bit9® + Carbon Black,® (https://www.bit9.com/)the leader in endpoint threatprevention (https://www.bit9.com/solutions/protection/),detection (https://www.bit9.com/solutions/advanced-threat-detection/)and response (https://www.bit9.com/solutions/security-incident-response/), today announced it has experienced dramatic growth and success in the first year of its Bit9 + Carbon Black IR partner program, which now includes:

·         40 leading IR firms, growing at the rate of one new IR partner per week

·         More than 400 IR professionals trained to use Carbon Black, with more than 30 IR professionals trained per month

·         More than 70 customer incident response engagements where Carbon Black was used

The Power of the Partnerships for IR Firms

IR partners receive free access to (and are thoroughly trained to use) Carbon Black,the market’s most advanced endpoint threat detection and response IR solution. Partners then use the software as a core component of their detection and response services. Explosive growth in the IR market has led to extraordinary demand for leading IR firms to join the Bit9 + Carbon Black IR partner program.

“Our IR partner program is empowering the best and brightest incident response professionals in the industry,” said Tom Barsi, vice president of business development for Bit9 + Carbon Black. “We now have more than 400 security professionals trained in Carbon Black who are using it on IR engagements. With the growth rate we are seeing in this partnership program, Bit9 + Carbon Black is clearly becoming the preferred solution in the IR community.”

How Partners Use Carbon Black
IR firms conduct response engagements differently now than even a few years ago, and Carbon Black empowers them to meet the rapidly changing model of IR. Rather than just performing a “breach autopsy” after the damage is done, IR partners use Carbon Black (https://www.bit9.com/solutions/carbon-black/)to actively diagnose and remediate cyber attacks as they are occurring.

As they identify malicious files used to execute an attack, security teams use Carbon Black to pinpoint each endpoint and server on which malware has landed and reveal the entire “kill chain” of the attack, so responders can quickly see where and how the attack started and what machines it has affected. Responders then use Carbon Black’s “live” capabilities to isolate affected endpoints, interrogate their current state, and take corrective action, all from the responder’s remote desktop. This enables responders to rapidly diagnose attacks, contain their spread, and accelerate remediation efforts.

“Equipping our expert teams with Carbon Black has empowered them to see the full kill chain of an attack,” said Timothy P. Ryan, Kroll’s managing director and head of the cyber investigations practice. “In today’s world of advanced, targeted attacks, incident response is about continuously preparing for a breach by detecting, responding to and remediating threats—as they happen—before major damage is done. With Carbon Black, we have the ability to do just that.”