When cyber attackers infiltrate your systems, they rely on stealth to remain unnoticed. According to IBM’s Cost of a Data Breach Report 2024, it takes an average of 292 days to identify and contain breaches involving stolen credentials, 261 for phishing attacks, and 257 days for social engineering attacks.  

As advanced persistent threats (APTs) often hide behind seemingly normal events, they also play to their advantage the increasing number of alerts analysts receive to avoid detection. To increase visibility in the midst of notifications, we’ve released Chain of Events, a new feature in Muninn’s AI Detect that will save you time and effort triaging alerts.

Connect the dots to find even the more elusive threats

Analysts are overwhelmed by the number of alerts, and not even one security team can triage them all, correlate them, and draw conclusions about a possible attack. But what if you could automate this process?

This is precisely what Chain of Events does for you. With long-term memory, it looks months back and connects seemingly normal events over time to identify tactics and techniques indicative of an evolving attack chain. It finds a needle in a haystack and adds a new layer of threat detection by putting all the pieces together.

Level up precision, turn the noise down

Alert fatigue leads to missing important threats and hinders proactive threat-hunting strategies. With too many alerts, analysts struggle to manage threats efficiently.  

From reconnaissance to exfiltration and impact, Chain of Events puts order to chaos. By looking across the notifications generated by Muninn’s AI Detect and matching them against attack patterns, it increases the confidence that actual malicious behavior is taking place.

As it reduces the number of false positives, Chain of Events helps your team focus on the bigger picture. Chain of Events doesn’t substitute Muninn’s notifications but transforms them into valuable insights in a sequential chain, so you can identify real risks that fly under the radar before it’s too late.

Save time for more proactive threat detection

“With Chain of Events, instead of looking at hundreds of alerts per month you can focus on a few chains that highlight real potential threats, saving time”, says Jesper Skovdal, Senior IT Consultant at Cadesign Base, who has already tested Chain of Events. Your time is valuable. Let Muninn’s automation review hundreds of alerts and connect critical events that would otherwise take you forever to pinpoint.

Its easy-to-use widget shows you all the attack patterns at a glance. Munnin will show you the timeline of any chains developed on a device in the network and the possible future paths the chain can take, so you can proactively stop them.  

In addition, we’ve also improved the Notifications overview to enhance your user experience. Now, you can see if the events detected belong to a chain, including a link to the specific chain, to save you time and effort during the investigation.

See a short demonstration of Chain of Events

Witness how Chain of Events enhances your security

Do you want to know more about Chain of Events and other enhancements to the detection scripts included in this release? Book a demo to see in first person how it can help you cut down the mean time to detect. As usual, if you have any question, contact your Muninn representative.