Malware Detection

File system and endpoint data detect ransomware by identifying suspicious activity and pausing file syncing.

Business impact

• Malware detection rate — Higher detection rate reduces successful malware infections and breaches
• Incident response time — Faster detection enables quicker mitigation and containment of threats
• File recovery time — Improved recovery processes minimize downtime and data restoration delays

Data requirements

• File system logs (Structured) — Analyze file changes and access patterns to detect suspicious activity
• Network traffic data (Numeric) — Monitor network flows for anomalies indicating malware communication
• Endpoint telemetry (Structured) — Collect device behavior data to identify ransomware execution patterns
• User activity logs (Text) — Track user actions to detect unusual behavior linked to malware

AI methods and techniques

• Predictive AI — Predict potential malware threats by analyzing behavioral patterns and anomalies
• Agentic AI — Autonomously respond to detected threats by pausing syncing or isolating endpoints

AI models and model families

GPT-4o, Custom ML classifiers, Anomaly detection models