Your H-ISAC membership changes the game.
Security vendors typically offer generalized cyber threat intelligence (CTI) that originates from their own products. But H-ISAC prioritizes the threats most likely to target your business – so you can rapidly detect the threats that affect you the most.
Now you need a way to use and interact with H-ISAC intelligence.
To get the most out of H-ISAC’s quality cyber threat intelligence, you need to:
– Detect the threats H-ISAC warns you about
– See the threats other H-ISAC members are detecting
– Share back to H-ISAC to make your community stronger
Most options just to get that first point come at a high cost: hire dedicated threat analysts to manually process spreadsheets of data, purchase security tools that require even more investments (like a SIEM), or build a custom CTI solution.
But you don’t need to break the budget.
Perch is the first Community Defense Platform: an intuitive user interface that integrates with H-ISAC’s threat intelligence so you can detect, see, and share with H-ISAC.
And you can relax.
With Perch Managed Service, your Perch sensor is monitored around the clock by analysts who work with communities every day. We’re quite specialized in responding to the types of alerts you face, and escalating serious threats when they rear their heads.
Is Perch a TIP?
Perch is not a Threat Intelligence Platform (TIP); you could think of a TIP as an intelligence server, and Perch as an intelligence client. You can use Perch with a TIP, but a TIP is not required – Perch works perfectly well without one.
Do I need anything extra for Perch to work?
All you need to make Perch work for you is a membership with an intel sharing community (like H-ISAC). You do not need to purchase any other security tools or hire analysts. (We like to call Perch a SIEM-less solution.)
Can Perch benefit me if I already invested in a SIEM and/or a TIP?
Yes – Perch can pull threat intelligence data from any platform, especially a STIX/TAXII source.
Perch streamlines the detection process, communication with community members, and facilitates alert resolution.
It lets you connect with TIPs or other communities; and lets you visually sort and filter alerts from each of your intelligence sources. Perch sensors can be set up as a source of alerts for your corporate SIEM.
How do I set up my sensor? Where?
Perch sensors monitor a network segment via a TAP or SPAN port. They work best in an “inside the firewall” configuration. We created an easy to follow Setup Guide that comes with your sensor.