Examine our research from the last year in the ReliaQuest 2024 Annual Cyber-Threat Report
Reduce Alert Noise and False Positives
Boost your team's productivity by cutting down alert noise and false positives.
Automate Security Operations
Boost efficiency, reduce burnout, and better manage risk through automation.
Dark Web Monitoring
Online protection tuned to the need of your business.
Maximize Existing Security Investments
Improve efficiencies from existing investments in security tools.
Beyond MDR
Move your security operations beyond the limitations of MDR.
Secure with Microsoft 365 E5
Boost the power of Microsoft 365 E5 security.
Secure Multi-Cloud Environments
Improve cloud security and overcome complexity across multi-cloud environments.
Secure Mergers and Acquisitions
Control cyber risk for business acquisitions and dispersed business units.
Operational Technology
Solve security operations challenges affecting critical operational technology (OT) infrastructure.
Force-Multiply Your Security Operations
Whether you’re just starting your security journey, need to up your game, or you’re not happy with an existing service, we can help you to achieve your security goals.
Detection Investigation Response
Modernize Detection, Investigation, Response with a Security Operations Platform.
Threat Hunting
Locate and eliminate lurking threats with ReliaQuest GreyMatter
Threat Intelligence
Find cyber threats that have evaded your defenses.
Model Index
Security metrics to manage and improve security operations.
Breach and Attack Simulation
GreyMatter Verify is ReliaQuest’s automated breach and attack simulation capability.
Digital Risk Protection
Continuous monitoring of open, deep, and dark web sources to identify threats.
Phishing Analyzer
GreyMatter Phishing Analyzer removes the abuse mailbox management by automating the DIR process for you.
Integration Partners
The GreyMatter cloud-native Open XDR platform integrates with a fast-growing number of market-leading technologies.
Unify and Optimize Your Security Operations
ReliaQuest GreyMatter is a security operations platform built on an open XDR architecture and designed to help security teams increase visibility, reduce complexity, and manage risk across their security tools, including on-premises, clouds, networks, and endpoints.
Blog
Company Blog
Case Studies
Brands of the world trust ReliaQuest to achieve their security goals.
Data Sheets
Learn how to achieve your security outcomes faster with ReliaQuest GreyMatter.
eBooks
The latest security trends and perspectives to help inform your security operations.
Industry Guides and Reports
The latest security research and industry reports.
Podcasts
Catch up on the latest cybersecurity podcasts, and mindset moments from our very own mental performance coaches.
Solution Briefs
A deep dive on how ReliaQuest GreyMatter addresses security challenges.
White Papers
The latest white papers focused on security operations strategy, technology & insight.
Videos
Current and future SOC trends presented by our security experts.
Events & Webinars
Explore all upcoming company events, in-person and on-demand webinars
ReliaQuest ResourceCenter
From prevention techniques to emerging security trends, our comprehensive library can arm you with the tools you need to improve your security posture.
Threat Research
Get the latest threat analysis from the ReliaQuest Threat Research Team. ReliaQuest ShadowTalk Weekly podcast featuring discussions on the latest cybersecurity news and threat research.
Shadow Talk
ReliaQuest's ShadowTalk is a weekly podcast featuring discussions on the latest cybersecurity news and threat research. ShadowTalk's hosts come from threat intelligence, threat hunting, security research, and leadership backgrounds providing practical perspectives on the week's top cybersecurity stories.
March 26, 2024
About ReliaQuest
We bring our best attitude, energy and effort to everything we do, every day, to make security possible.
Leadership
Security is a team sport.
No Show Dogs Podcast
Mental Performance Coaches Derin McMains and Dr. Nicole Detling interview world-class performers across multiple industries.
Make It Possible
Make It Possible reflects our focus on bringing cybersecurity awareness to our communities and enabling the next generation of cybersecurity professionals.
Careers
Join our world-class team.
Press and Media Coverage
ReliaQuest newsroom covering the latest press release and media coverage.
Become a Channel Partner
When you partner with ReliaQuest, you help deliver world-class cybersecurity solutions.
Contact Us
How can we help you?
A Mindset Like No Other in the Industry
Many companies tout their cultures; at ReliaQuest, we share a mindset. We focus on four values every day to make security possible: being accountable, helpful, adaptable, and focused. These values drive development of our platform, relationships with our customers and partners, and further the ReliaQuest promise of security confidence across our customers and our own teams.
More results...
Whenever Royal Marines deploy on operations, they take with them their own intelligence analysts. These analysts are fully trained and experienced Marines, meaning they benefit from having been in the position of the consumers of the intelligence they produce. Moreover, they complete rigorous intelligence tradecraft training, creating a formidable asset to support Marines on the frontline.
But do we have a similar arrangement in the information security industry? From what I’ve seen, the answer is mixed; some organizations are entirely technically focused, some lean more on the intelligence side, and a handful boast a combination.
In addition to this, there is also a developing skepticism against vendors who emphasize the intelligence background of their staff. This may be seen as the curse of the ‘3 letter guys’ – a term used to describe ex NSA/CIA/MI5/MI6 analysts, but also synonymous with any previous government analyst. Its usage is almost always negative. There’s obviously a danger with this input focused emphasis, but what is the output of intelligence expertise? How can we ensure that we can effectively merge technical knowledge with the intelligence tradecraft?
Firstly, like information security, intelligence is a discipline and profession of its own. Trained analysts bring with them a toolbox of intelligence instruments they can deploy. Therefore the relevance, accuracy, utility, and robustness of products are increased, thus reducing the risk of intelligence failure and, ultimately, the disruption of business and loss of profit.
So how can we get the best of both worlds and utilize information security and the intelligence? I see there being two options:
1. Hire individuals with both sets of skills. Unfortunately, these are rare and expensive.
2. Hire both technical and intelligence experts, and integrate the two.
So what would this integration look like in practice? Take this example. Our collection detects a criminal actor offering a new malware variant for sale on a criminal forum. Our intelligence analysts can assess the actor’s credibility using assessments from previous reporting and comparing these to the new information. Is the language similar to previous posts? Is the malware being offered similar to what would be expected from that actor? Is the post within the expected pattern of life? Does the post fit with what is expected of this forum? Why is this being offered for sale? Does it fit with a trend? Where is that trend going? Where does the author sit in the network of malware sellers?
The analyst can answer the “who, what, when, why, where”, but we rely on our information security colleagues for the “how”. In my example, they can comment on the technical details regarding the malware, what it means and potentially how it can be mitigated. Importantly, they can comment from the perspective of the consumer. Just like the Marine intelligence analyst with the frontline experience, the information security professional can contextualize intelligence so that it can be understood and acted on. This is becoming all the more important as consumers become increasingly demanding and are seeking relevant intelligence that is tailored to them and their sector.
Together, both these disciplines provide a powerful force for demystifying threats and increasing cyber situational awareness. This is exactly what we are building at Digital Shadows (now ReliaQuest).