Cases, subjects and pattern detection

How BREADCRUMB® connects individual signals into the picture of a developing threat.

One odd sign-in is noise. BREADCRUMB® correlates each actor's signals into trails — scoring risk by severity, recency and how many stages of a threat pattern the trail covers.

• The model
• Subjects — the people, accounts and devices signals are attributed to.
• Trails — a subject's correlated signals, scored and matched against threat patterns (exfiltration chain, account takeover, insider recon and more).
• Cases — the investigation record: the subject, the evidence trail, a hypothesis and the AI assessment.

• From pattern to case