EAGLE6

EAGLE6 is a cybersecurity software platform that helps organisations detect and respond to threats on their networks. Its main idea is to link attacker behaviour to the MITRE ATT&CK framework, so investigators can see how an intrusion progressed.

What EAGLE6 offers

• Attack-chain mapping — automatic mapping of observed activity to ATT&CK techniques to support investigations.
• Cyber threat hunting — tools for searching a network for signs of compromise.
• Situational awareness — a view of activity on the network.
• Insider threat monitoring — detection of risky behaviour from within an organisation.
• Automated incident documentation — records of what happened during an incident.
• Campaign Watch — a feature that follows the progress of a hunt over time.
• Remediation guidance — suggested steps for security teams responding to attacks.

Who it works with

Security teams, including red, blue and purple teams that need to share notes on attacker activity.

Key facts

• Product type: Software platform
• Framework: MITRE ATT&CK