Cratylus for Insider Threat.
Behavioral intelligence beyond the firewall. Understand changes in trusted personnel’s public online activity, with context for a considered response.
Earlier attention starts with understanding the person
People entrusted with sensitive access have lives beyond the workplace. Their public conversations can offer context about changing concerns, pressures, and interactions that an organization’s internal security systems may not capture.
Tools for the security professional
Advanced behavioral analytic features for the modern security professional.
- Automated alerting. Cratylus for Insider Threat process automatically scans key personnel public online behavior, creating alerts on concerns. Once Cratylus raises an alert, it allows the security team to create a case from it, pre-populated with what the AI uncovered.
- Case-centric workflow. The web-based UI to Cratylus is focused around working cases instead of random queries. Cratylus for Insider Threat makes it easy for a human security team to create a case to manage investigatory information, such as relevant database information, case notes, and other pertinent information.
- Manual case creation. Manually create cases in Cratylus to leverage our dataset and analytic capabilities in the course of existing investigations. If necessary, Cratylus will source the person's historical public online activity, backfill its database, and run the same analysis against it as if it were live data.
- Managed data privacy. Cases manage the scope of data made available to investigators, giving them access only to information for their individual role, thereby respecting the privacy of your personnel and third parties they interact with. This prevents rogue investigators from looking at data they have no legitimate need to see.
- Forensic data log. Evidence is only as strong as its integrity. All AI analytics, data collection, and case actions are tracked in an irrefutable digital ledger using strong cryptography, preventing the tampering of data in an on-going case and ensuring its validity in possible follow-on legal action.
- Cross-network tracking. Follow behavioral movements online across social networks, web forums, and other public sources. Advanced OSINT techniques disambiguate and find publically available information where your key personnel are communicating away from the corporate network.
A history that makes change understandable
Allegory, our analysis engine, connects public online activity with the topics and conversations informing it. It organizes observed reactions over time, preserving the evidence needed to examine what someone expressed, what they were responding to, and where and when it happened, including on foreign language sites.
That history is the foundation for our approach to individual behavioral baselines. The goal is to recognize meaningful departures from someone’s established pattern, with enough context to judge whether that departure warrants further attention.
Bring the evidence into the review
- Understand the conversation. Read an expression alongside its topic, the post it responds to, and the surrounding thread. A quotation, a criticism, and an endorsement can use the same words with different meanings. This gives clarity to humor, ridicule, and similar nuanced language.
- Examine the history. Follow a person’s observed reactions across periods of activity. Consider the timing, available evidence, and uncertainty before interpreting an apparent change.
- Choose a proportionate response. Bring that context into your established security and human resources review process. A concern may call for a "check-in", employee support, clarification, or further investigation.
Support a considered decision
A behavioral change alone does not establish harmful intent. The reviewer must verify the context, consider alternative explanations, and assess any concern alongside the person’s role and other relevant evidence. Cratylus’s approach complements the information and judgment already within your insider threat program.
Earlier identification of a colleague in trouble allows your team to intervene early, before they can become a threat. Interventions like this can save the business and your colleague's career.
Explore the fit for your organization
See how this approach applies to government, the aerospace and defense sector, and technology firms with high-value intellectual property.
Learn how Allegory builds the analytical foundation or request a briefing to discuss data coverage, current capabilities, and your team’s review needs.
When trust is essential,
perspective is everything.
Let’s talk about what a clearer view could mean for your organization.