Brewin Dolphin Invests in Better Visibility and Control with RevealX

"ExtraHop goes much deeper than the typical transactional reporting of traffic by analyzing actual behaviors occurring across the network and on endpoints," says Head of Digital Security and Resilience, Neal Beattie.

Fewer false positives and more meaningful detections

• RevealX removes what Beattie calls “rubbish” information using full stream analysis, traffic decryption, and machine learning.
  
  

Beneficial to more than just the network and security teams

• Beattie says, "The way that ExtraHop is architected means that we've been able to make the platform accessible to colleagues across other operational teams. The wide range of capabilities and functionality of the ExtraHop platform is driving value across our entire technology function."

Detected ongoing red team activity as soon as RevealX was deployed

• "We were immediately able to see events occurring that we previously had limited visibility into," recounts Beattie.
  
  

Streamlined investigation of network issues

• "We were having some problems with domain controllers disconnecting and our legacy infrastructure monitoring solution just wasn't picking anything up,” Beattie says. "However, analyzing the ExtraHop data revealed a metric that directly correlated to the drops. We set up an alert in ExtraHop, cross-referenced the information to identify the root cause, and subsequently resolved the situation."
  

Baseline data on network and application activity across the organization’s distributed infrastructure

• “We use the detailed metrics from ExtraHop to cross-check events generated by other controls across the environment. The rich, contextualized data we receive from ExtraHop enables us to be better informed and operate more effectively," says Beattie.
  

Detections integrated into SIEM platform