Start Demo
Start Demo

Wire Data for Defense and Intelligence

Maintain situational awareness and information dominance.

AFCEA Corporate Member Logo

The cyber landscape grows more complex and murky every day, but maintaining situational awareness is more important than ever for defense organizations' initiatives. Now is the time for more capable and scalable platforms that can achieve information dominance.

As more threats are cross over into the cyber domain, how can you close the gaps and meet the digital age head on?

ExtraHop provides total visibility with real-time stream analytics, and the platform is open and extensible, so it can adapt and sort signal from noise with increasing efficiency even as the cyber landscape evolves.

ExtraHop Contacts for Federal Sales

Mike Ernst, Manager, Federal Sales Engineers
m.ernst@extrahop.com | 206.474.2181 | Florida

Mary Oliva, Regional Sales Manager, DoD & Intelligence
m.oliva@extrahop.com | 202.725.5292 | Virginia

Matt Schneider, Federal Account Development Representative
m.schneider@extrahop.com | 281.798.9291 | Virginia

Mitchell Schwartz, Sales Engineer, Federal Civilian
m.schwartz@extrahop.com | 703.334.1301 | Maryland

With ExtraHop you can:

  • Deploy rapidly and get actionable insights within hours or even minutes with no agents to instrument.
  • Automatically map activity and dependencies to assure continuous knowledge of everything happening on your network.
  • Audit security certificates and file access activity to assure regulatory compliance and that sensitive data is only being accessed by authorized users.
  • Get detailed application-level transaction metrics such as specific users, files, errors, and methods to help isolate the root cause of problems quick.

Use Cases

Advanced Persistent Visibility

Using ExtraHop, the team quickly identified the compromised hosts, which data was exposed, and malicious servers involved. They discovered a compromised internal server being used to stage a brute force login attack on the database, and examined subsequent database queries to understand what the attackers were up to. Then they isolated how the breach occurred and strengthened their security accordingly.

Correlating Revenue with Payment Transactions

A financial company used ExtraHop application inspection triggers to show all unique orders and total revenue by merchant, as well as the transaction times with SLA thresholds so they could identify real-time purchasing trends. It gave them insight they needed to justify budget for architecture improvements.

Detecting Data Exfiltration

A large government agency needed a way to identify the source of a data leak and detect any future data exfiltration. The security team used the ExtraHop platform to identify a specific machine with abnormal DNS activity as the source of the leak, and they now use ExtraHop as an integral part of their security monitoring and analytics.

Infrastructure Performance Monitoring (IPM)

The ExtraHop platform makes it easier to manage increasingly complex physical, virtual, and cloud environments by providing deep insight into wire data, all L2-L7 communications between servers…

Ransomware Prevention

The ExtraHop platform alerts incident response teams about a ransomware attack within minutes so they can take quick action to mitigate the impact.

Real-User Monitoring

ExtraHop created end-to-end workflow tracking and reporting for a technology services company, making it easy for their IT team to see what contributes to user-perceived load times and perform real-time analysis of how users are experiencing their site.

SSL Certificate Management

Situation Managing SSL certificates is one of the many mundane but important IT management tasks that weigh on IT Operations teams. ExtraHop makes these tasks easier, helping IT teams to proactively…

Security / Encryption Auditing

A large enterprise with both incoming and outgoing SSL traffic used ExtraHop to view the entire set of SSL behaviors on their network, so they could see how certificates were being used, plan SSL hardware purchases, and remove unused certificates.

Additional Resources