Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
SlideShare a Scribd company logo
®
October 2017
Navin Bagga
Solutions Engineer, 1E
Email: Navin.Bagga@1E.com
1E: 20 years of systems management experience
Technology
Awards
Licenses
Customers
>100,000
users
Patented
Innovations
Employee owned
Years
of systems
management
Organizations
Estimated yearly
savings for the
US Dept. of
Veterans Affairs
31
31m
76
40+
100%
20
1700
$25m
Employees
300+
Weeks Days Hours Minutes
Increasing demand for operations agility
Security monitoring
Operational issues
Digital disruption
Security remediation
SAM audits
M&A planning
Business Priorities
Accelerate
Digital
Business
Faster
Incident
Response
Automate
Compliance
Digital demands greater speed and automation
Front endUser Many
Intermediary
processes
Many
Intermediary
processesLarge
Databases
End Point
Great for:
• Policy based management and complex
repetitive tasks: application management
and OS migration
• Any task where an immediate response is
not required
Are not agile:
• Can’t respond to new requests, threats
and opportunities
• Require highly sophisticated operators
• Take a long time to configure, action,
validate and report
IT operations tools today
Ask questions,
Get immediate answers
Establish patterns through forensics
Have instructions carried out instantly
“Videoconferencing rather than letter writing”
So they can
A new capability is needed
The capability for the operator to have a
conversation with all endpoints in real
time
Introducing Tachyon
Real-time conversation with all endpoints
Direct connection from the operator to the endpoint
No staging points, no batch processes
Clients can be outside the LAN in coffee shops, airports, anywhere
Scales to the whole organization for completeness
and correlation
1m+ endpoint support
Almost zero impact on network, clients and IT operations
Correlate: software, processes, network, users, configuration and history
Product Packs
Expert learning shared across the organization
Tachyon provides a direct connection to the endpointTachyon provides a direct connection to the endpointTachyon provides a direct connection to the endpoint
Tachyon provides a direct connection to the endpointTachyon: Instructions
Instructions
Questions Actions
Tachyon Example – Simple question across all endpoints
Some use cases…
Software and/or Hardware inventory
• Of data not available by default in SCCM – in real time
• Troubleshoot by identifying changes over past X days… correlate with app/device crash data…
Operational issue that requires an update to a file or registry key
• No need to create a script for SCCM, deploy same, etc. takes days… capability is already in Tachyon, takes seconds –
can be tested and rolled out in stages, in minutes.
Monitor which users are accessing which domains/websites
• Track usage of Cloud based applications
• Identify who is logging into/administering AWS and Azure workloads
Windows 10 readiness assessment
• Hardware compatibility, BIOS/UEFI, TPM versions, etc. Real time/instant.
And much, much more!
E.g. Use Case: Ransomware – detection and response
• Investigate and understand exposure in seconds
– Including on machines NOT on VPN/WAN… any internet connection is ok
• Remediate as soon as kill-switch or patch is available
• Leverage “Tachyon Exchange” to download 1E or community
driven IOC searches and remediation's
• Emergency changes were leveraged for Petya
– Can take 48 hours to remove Local Administrative Rights
– Tachyon can identify machines with identical passwords and enable
LAR administration in minutes rather than hours.
• With Tachyon, as soon as the change is approved it can
be actioned and confirmed
Link in email
infects devices
Devices
Email link
exploits Java
Java downloads
malware
Threat
actors
Watch the demo here:
https://vimeo.com/200328814/9d0403b206
Fastest EDR solution - enables a conversation with endpoints everywhere
Almost zero impact on network, clients and IT operations
While standalone, makes SCCM even more effective
Real answers from all endpoints – no caching
Product Pack - Expert learning shared across the organization
Correlation of all IT data for rapid analysis and remediation
Why Tachyon instead of alternatives?
Thank you
Navin Bagga
Solutions Engineer, 1E
Email: Navin.Bagga@1E.com

More Related Content

SCUGBE_Lowlands_Unite_2017_1E tachyon

  • 1. ® October 2017 Navin Bagga Solutions Engineer, 1E Email: Navin.Bagga@1E.com
  • 2. 1E: 20 years of systems management experience Technology Awards Licenses Customers >100,000 users Patented Innovations Employee owned Years of systems management Organizations Estimated yearly savings for the US Dept. of Veterans Affairs 31 31m 76 40+ 100% 20 1700 $25m Employees 300+
  • 3. Weeks Days Hours Minutes Increasing demand for operations agility Security monitoring Operational issues Digital disruption Security remediation SAM audits M&A planning
  • 5. Front endUser Many Intermediary processes Many Intermediary processesLarge Databases End Point Great for: • Policy based management and complex repetitive tasks: application management and OS migration • Any task where an immediate response is not required Are not agile: • Can’t respond to new requests, threats and opportunities • Require highly sophisticated operators • Take a long time to configure, action, validate and report IT operations tools today
  • 6. Ask questions, Get immediate answers Establish patterns through forensics Have instructions carried out instantly “Videoconferencing rather than letter writing” So they can A new capability is needed The capability for the operator to have a conversation with all endpoints in real time
  • 7. Introducing Tachyon Real-time conversation with all endpoints Direct connection from the operator to the endpoint No staging points, no batch processes Clients can be outside the LAN in coffee shops, airports, anywhere Scales to the whole organization for completeness and correlation 1m+ endpoint support Almost zero impact on network, clients and IT operations Correlate: software, processes, network, users, configuration and history Product Packs Expert learning shared across the organization
  • 8. Tachyon provides a direct connection to the endpointTachyon provides a direct connection to the endpointTachyon provides a direct connection to the endpoint
  • 9. Tachyon provides a direct connection to the endpointTachyon: Instructions Instructions Questions Actions
  • 10. Tachyon Example – Simple question across all endpoints
  • 11. Some use cases… Software and/or Hardware inventory • Of data not available by default in SCCM – in real time • Troubleshoot by identifying changes over past X days… correlate with app/device crash data… Operational issue that requires an update to a file or registry key • No need to create a script for SCCM, deploy same, etc. takes days… capability is already in Tachyon, takes seconds – can be tested and rolled out in stages, in minutes. Monitor which users are accessing which domains/websites • Track usage of Cloud based applications • Identify who is logging into/administering AWS and Azure workloads Windows 10 readiness assessment • Hardware compatibility, BIOS/UEFI, TPM versions, etc. Real time/instant. And much, much more!
  • 12. E.g. Use Case: Ransomware – detection and response • Investigate and understand exposure in seconds – Including on machines NOT on VPN/WAN… any internet connection is ok • Remediate as soon as kill-switch or patch is available • Leverage “Tachyon Exchange” to download 1E or community driven IOC searches and remediation's • Emergency changes were leveraged for Petya – Can take 48 hours to remove Local Administrative Rights – Tachyon can identify machines with identical passwords and enable LAR administration in minutes rather than hours. • With Tachyon, as soon as the change is approved it can be actioned and confirmed
  • 13. Link in email infects devices Devices Email link exploits Java Java downloads malware Threat actors Watch the demo here: https://vimeo.com/200328814/9d0403b206
  • 14. Fastest EDR solution - enables a conversation with endpoints everywhere Almost zero impact on network, clients and IT operations While standalone, makes SCCM even more effective Real answers from all endpoints – no caching Product Pack - Expert learning shared across the organization Correlation of all IT data for rapid analysis and remediation Why Tachyon instead of alternatives?
  • 15. Thank you Navin Bagga Solutions Engineer, 1E Email: Navin.Bagga@1E.com