CLAUDIA

Claudia is an endpoint solution integrated with the tool Carmen that allows to have a more complete visión on what happens inside a network, being its main goal the detection of complex malware and lateral movement related to APT.

The flexibility of the denominated “sensors” allows to have a total control of the network, increasing considereably the speed and efficiency in the resolution of a security incident.

Characteristics:

Claudia

Integrated CMDB with automatic update of the network assets

Claudia

Centralized endpoint configuration

Claudia

Sensor execution on request:

  • Querying registration keys
  • Querying existence of files
  • Execution of Yara rules all over the network
  • Carrying out remote memory dumps on demand
  • Execution of remote triage tools on demand

Claudia

Windows Event Collector

Claudia

Sysmon Event Collector

Contact:

PGP Key Download

FINGERPRINT CCFE 30F5 2D0D 60BB 6C8C F1E4 CC65 C901 8DE2 B669

Ministerio de Defensa
CNI
CCN
CCN-CERT