Rapid7, Inc.

Jeff Myers

Ralph McTeggart

Martin Hutchings

Sarah Addis

Luis Ramos Dos Santos Lopes

Niall Cochrane

Daniel Skelton

Ryan Williams

Erran Carey

John Brosnan

Andriy Lyubka

Lars-Kristian Svenoy

Dan-Adrian Moinescu

Darragh Delaney

Morgan Doyle

Luke Coughlan

Gianpaolo Tedesco

Matthew Robert Hathaway

Samuel Adams

Gianni Tedesco

Luke Coughlin

Sam Adams

Edward J Ciramella

Steven Torance

Disclosed herein are methods, systems, and processes for centralized containerized deployment of network traffic sensors to network sensor hosts for deep packet inspection (DPI) that supports various other cybersecurity operations. A network sensor package containing a pre-configured network sensor container is received by a network sensor host from a network sensor deployment server. Installation of the network sensor package on the network sensor host causes execution of the network sensor container that further causes deployment of an on-premise network sensor along with a network sensor management system, a DPI system, and an intrusion detection/prevention (IDS/IPS) system. The configurable on-premise network sensor is deployed on multiple operating system distributions of the network sensor host and generates actionable network metadata using DPI techniques for optimized log search and management and improved intrusion detection and response (IDR) operations.

Managed deployment and configuration of network sensors

Secure configuration of a network sensor on a network sensor host

Deployable network sensor for multiple platforms

Network sensor deployment for deep packet inspection

Systems and methods of managing the security of a networked environment by deploying virtual appliances and using a central monitoring console to manage the feedback from these virtual appliances and view it alongside other activity on the network environment. In one embodiment a system is provided that includes a control module; and one or more virtual appliances each configured to, upon deployment in the network, automatically communicably link to the control module and report state information about the virtual appliance.

Preconfigured honey net

Systems and methods of correlating accounts among a plurality of network assets using account lateral movement data is presented in the context of network security. In one embodiment a plurality of authentication audit logs are received from a plurality of assets; the plurality of authentication audit logs are correlated; and a notification is generated based on a comparison of correlation results and a database of permitted account associations.

Lateral account mapping

Growing community of inventors

Somerville, MA, United States of America

Jeff Myers