TeamWorx Security

TeamWorx Security

TeamWorx Security is a data science and software engineering firm focused on creating intelligent workforce solutions for cybersecurity and incident response, advanced malware analysis, threat intelligence analysis, enterprise communication, and critical infrastructure support. TeamWorx enables organizations to make faster decisions by creating a seamless workflow of integrations between people, processes and technology

Customer Challenge

Hive-IQ, a key offering from TeamWorx Security, allows Incident Responders to coordinate and synchronize their responses to cyber attacks rapidly. This fast-growing company needed detection technology that delivers immediate, actionable results, keeps up with its growth curve, and maximizes ROI.

Prior to using Detection as a Service, when security analysts at TeamWorx received a suspicious file, the only way to analyze the file was to do reverse engineering and then create a report that could take hours or days to complete. TeamWorx relied on an on-premise appliance which created slower and more manual processes when evaluating suspicious malware or delivering updates.

Partner Solution

Trellix Detection As A Service is an AWS built serverless solution that leverages static analysis, machine learning and AI driven models with Trellix’s patented dynamic analysis engine that can quickly analyze any file or URL to determine if its malicious or not.

In addition to receiving a verdict on each file or URL, customers also receive supporting contextual detail, such as file, registry, process and network changes, as well as relevant findings from continually updated Trellix Dynamic Threat Intelligence that help analysts understand the nature of the threat.

Trellix analyzes millions of files each day with this service through its core product offerings and key integrations with over 50 security partners. Trellix leverages AWS Lambda, Amazon Aurora, Amazon S3 and Amazon EC2 services to provide this highly scalable and efficient solution for its customers.

Customer Results

According to TeamWorx, utilizing an AWS cloud platform service provides an “always-on” capability and allows for scalability, easier maintenance, and management with automatic updates and no downtime. In addition, using a cloud delivery service eliminates any possibilities of encountering power outages versus using on-premise.

Through using Trellix, Detection as a Service via the AWS platform, TeamWorx experienced a 50% reduction in cost, lessoned incident response data in 5-10 min or less with 99.9% availability. Leveraging a cloud based threat detection service, security analysts at TeamWorx can now use this previous time saved to focus on stopping attacks for their customers.