ACTIVE CRIME RESEARCH, BEFORE YOU NEED IT.
The mission and objective of the Tecninf Labs is to actively monitor, in a process of continuity, cybercrime scenarios following particular threats, such as cyber squatting or government activism.
The Lab and the TIG switch to active protection, not simple monitoring, and simulate IT actions such as to be able to trace sensitive data exfiltrated on the same criminal territory.
The Tecninf Criminal Intelligence action scenario includes:
The system works natively alongside threat intelligence. It sheds a light on criminal activities, entering their contexts by simulating active participation.
This simulation allows a result that is not only tangible but real and more sudden. The exfiltrated data, most of the time, does not have the possibility to be published, or the reaction time to this event is drastically lowered.
Ability to detect leaked accounts exposed on the deep web, through automated osint analysis procedures.
Predisposition to retrieve entire databases of leaked accounts stored within the system, and from hits from TIG within communications, chats or posts on social forums. The Secure Intelligence Engine is activated manually, starting the alerting and correlation of sensitive data.
Ability to detect device credentials or entire compromised device infrastructures, with monitoring always active on the deep web.
When device credentials are shared or published on the monitored sites, the alert is triggered and the Secure Intelligence Engine begins to correlate and catalog the data.
Propensity to detect “sensitive words” on entire domains, websites or social forums.
Ability to detect “keywords”, with monitoring always active on the dark web. When the keywords are shared or published on the monitored sites, the alert is triggered and the Secure Intelligence Engine begins to correlate and catalog the data.