Cyberark Software Ltd.

Minerva Labs Ltd.

Denis Kamanovsky

Andrey Dulkin

Yair Sade

Yoel Eilat

Erez Breiman

Eduard Bobritsky

Omri Moyal

Gil Migdan

A method for processing files as a preemptive measure against a ransomware activity. The method comprises scanning a plurality of file operation requests sent to an operating system (OS) executed on a computing device to detect a guarded file operation request that comprises instructions to process a file managed by a file system used by said OS, delaying an execution of said guarded file operation request, temporarily storing a copy of said file in a backup storage in response to said detection of said guarded file operation request, and stop delaying said execution of said guarded file operation request when said copy is stored in said backup storage.

Ransomware attack remediation

Methods and systems are disclosed for identifying security risks, arising from credentials existing on machines in the networks that enable access to other machines on the networks. Account credentials indications are retrieved from machines in the network, which indicate that credentials for accounts are stored on those machines. Access rights for accounts are collected, describing the access and operation permissions of these accounts on machines in the networks. A correlation is then performed to identify machines that can be accessed by employing credentials of accounts retrieved from other machines in the network.

Correlation based security risk identification

Growing community of inventors

Ramat Gan, Israel

Denis Kamanovsky