Cybersixgill Threat Intelligence - CTI

My main use case for Cybersixgill is dealing with cyber threat intelligence. When an organization's information was breached or found on the dark web, I was able to immediately notify them through the data lake that I had access to and I could thwart the threat by examining the information on the dark web to get a proof of concept to determine if they actually did steal or breach an organization's private information. In many cases, I was able to verify that and purchase it back using Bitcoin, so the organization could prevent having to go public with the breach.

I typically identify the breaches on the dark web through automated alerts, manual searching, or another method. I definitely perform manual searches as well. Manual searches are something that I can always tweak to try to find the best approach to eliminate false negatives. I was able to set it up with automation, which is the best option. Automation automatically gives visibility, but manual searches had to be done as well to tweak the system until I could finally eliminate those false negatives.

I used Cybersixgill ultimately to find stolen or compromised information that was on the dark web, and I was able to verify it and buy it back.

Cybersixgill helps with compliance and regulatory compliance because I have all this information and I can thwart the attack from taking place before it happens. I get the chatter that is on the dark web, and with the right tweaks and the right onboarding, I am able to set up exactly what I am trying to identify before it actually happens. When there is talk or chatter on the dark web about an organization, I can get ahead of it.

The best feature Cybersixgill offers is cyber threat intelligence.

What specifically stands out to me about the cyber threat intelligence feature is the speed and the depth from the data lake. Cybersixgill, which is now called Bitsight, actually had the largest data lake in the industry in my opinion of information on these bad actors. I was able to have them classified, I was able to give them rankings, and I was able to immediately know who I was dealing with. The research and the preparation was already done in reference, so it was not going back to the drawing board. I already had identities on these bad actors.

Cybersixgill has positively impacted many organizations by being able to quickly identify what attack is taking place. Not just on the dark web, but maybe it was an impersonation attack from someone using LinkedIn, trying to pretend that they were the CEO for a major company, such as Coca-Cola, Microsoft, or IBM. To be able to stop that quickly in its tracks is a huge thing, and it is a very big plus for anyone trying to deal with anything that is bad when it comes to these bad actors and what they do today.

I can share that it definitely caused organizations to have fewer incidents when it came to having to go public with these breaches. At this point in the game, every organization is getting breached. It is just a matter of how fast I am able to establish that breach and to find the information using the dark web, which is the Tor application that I use to get on from Cybersixgill. Once I can quickly identify the information being sold or trying to be sold on the dark web, I get proof of concept and I can then identify which bad actor group is actually using this information and selling this information. I can then quickly purchase it back to prevent them from having to go public, which lowers their reputation.

Cybersixgill has one of the largest data lakes around. I think the way they can be improved is to be able to initially during the onboarding, make sure that the false positives are correctly addressed to really do the tweaks that need to be done to filter through exactly what the organization is trying to accomplish and give them the outcomes they are looking for without all the extra noise or chatter.

I just think during the onboarding, that is the most crucial part to make sure that the organizations who purchase Cybersixgill ensure that they actually have the right person or persons to go through the onboarding to make sure that the data lake feeds can be properly set up and organized so it can filter through the noise and the chatter.

I have been working in my current field for 18 years, since 2008.

Cybersixgill is stable.

My experience with the scalability of Cybersixgill is that it is a piece of cake. As small or as large as I want to be, Cybersixgill is able to accommodate any organization. Cybersixgill's scalability is very scalable.

The customer support is top-notch and excellent.

I previously used a lot of solutions that are open-sourced on the web and anyone can use them, but they are not as specific or up to speed or updated as Cybersixgill, and that is why I and everybody else uses Cybersixgill.

Cybersixgill integrates easily with my existing security tools or platforms using web services API, so that is a piece of cake.

The reporting and dashboard functionality in Cybersixgill is very intuitive.

I have seen a return on investment, absolutely. The return of investment was quick and easily seen within the first 90 days, and that is when an actual quarterly meeting, a QBR, would take place to be able to show that return on investment. Typically, it paid for itself in a small amount of time.

My experience with pricing, setup cost, and licensing is that the pricing was very well priced. It was not the cheapest, but it was not the most expensive, and based on the needs of the customer, there was always a negotiation that could be done to get a slightly lower price.

Before choosing Cybersixgill, I evaluated other options, including free ones that were on the web and open-sourced.

The advice I would give to others looking into using Cybersixgill is to definitely take a good look at it and make sure if they decide to purchase it, it is a good investment, but more importantly, to make sure the onboarding is done correctly to be able to tweak out all the false positive information because it is a lot of information that will be thrown at you, kind of drinking from a fire hydrant if you do not tweak it and onboard successfully. My overall review rating for Cybersixgill is 9 out of 10.

Our main use case for Cybersixgill during our proof of concept was to find a tool as a single pane of glass that would provide us actionable threat intelligence along with adversary reporting. We were also looking for a tool that could perform multiple functions, including dark web scanning and dark web intelligence specifically.

When I need to prepare a report for one of my customers, I can search for that particular organization's exposure over the darknet to find what has been there, what emails have been leaked, and other relevant information by checking different dark web forums, market forums, leak sites, and any ransomware groups claiming or naming that particular organization on their leak sites.

The best feature that Cybersixgill offers with respect to dark web intelligence is that they provide very good screenshots of where the particular data has been taken, which allows for better visualization and understanding of the scenario, with the source being indicated through onion links that can be reverse-engineered for further investigation.

We were really impressed by some of the features of the platform, and we were planning to integrate it into our day-to-day work, but I'm not certain whether that happened because I was serving a notice period at that time.

I used Cybersixgill for only three months as a proof of concept, so I do not feel I am in a position to provide meaningful suggestions for improvements.

I used Cybersixgill for a very limited period of time, which was approximately two to three months, and this was during a product review session for our team's proof of concept.

If you are looking for threat intelligence that can cater to various needs from IOC to threat advisories and along with dark web intelligence, then you should try Cybersixgill. I gave this product a rating of 8.