Scope Markets

Scope Markets is 100% cloud-based, utilizing public cloud infrastructure and Microsoft 365. While its comprehensive migration to the cloud has facilitated flexible working and fast growth over the last four years, it has simultaneously expanded the attack surface and exposed the organization to new threat vectors.

The team at Scope Markets were already leveraging Microsoft security products – including Sentinel and Defender for Endpoint – to catch known cyber-attacks but turned to Darktrace to complement these solutions with an additional layer of insight. Darktrace uses Self-Learning AI to stop novel and sophisticated threats, the 'unknown unknowns' that evade signature-based tools.

The technology was set up in under an hour and immediately began learning from scratch, developing a continuously evolving 'pattern of life' for the organization, enabling it to detect subtle deviations indicative of attack.

Einheitliche Transparenz und mehrdimensionale Einblicke sind entscheidend für den Schutz von Unternehmen wie Scope Markets, die die Cloud vollständig nutzen. Die selbstlernende KI von Darktrace korreliert Aktivitäten in SaaS-Anwendungen wie Salesforce und Microsoft 365, in Cloud-Diensten wie AWS und Azure sowie in der gesamten digitalen Infrastruktur vor Ort und außerhalb des Unternehmens, um alle bösartigen Aktivitäten zu erkennen.

Furthermore, Darktrace's  open  architecture  enables  seamless integrations with disjointed defenses, streamlining alerts for the IT security team and instantly correlating  insights across multiple siloes.

Darktrace's  Self-Learning AI takes into account activity from across the enterprise – from cloud applications to the corporate network, and down to the  endpoint – something the security team found particularly valuable following the sudden transition to remote working in 2020.

Employees who were previously protected behind firewalls on office desktops were left more vulnerable to fraudulent or malicious websites. Having Darktrace on the endpoint shed a light on the anomalous activity that could expose the business to harm.

Learning the unique 'patterns of life' for every user and device within Scope Markets' cyber ecosystem, Darktrace provides a holistic view of the digital business to detect subtle indications of cyber-threat.

Terry Wright, Head of IT Infrastructure bei Scope Markets, erklärt: "Wenn etwas Ungewöhnliches auf dem Endpunkt passiert und Minuten später etwas Ungewöhnliches auf Microsoft 365, kann Darktrace beides als Teil desselben Vorfalls erkennen. Das hatten wir vorher nicht."

Zusätzlich zum Schutz vor neuartigen und ausgefeilten Bedrohungen unterstützt Darktrace das Sicherheitsteam von Scope Markets mit dem Cyber AI Analyst, der automatisch alle Sicherheitsvorfälle triagiert, interpretiert und darüber berichtet.

The technology combines expert analyst intuition with the consistency, speed, and scalability of AI. Wright's team use Cyber AI Analyst to illuminate the highest priority threats at any one time, with the technology rapidly synthesizing all of the context around an attack into a natural language report. "Our alerts can be filtered with Self-Learning AI so that they're more relevant, saving time for our security team and enabling more efficient allocation of staffing," says Wright.