Download PDF
Vectra AI Inc. > Case Studies > Greenhill stops cyberattacks from enterprise to Office 365 SaaS
Vectra AI Inc. Logo

Greenhill stops cyberattacks from enterprise to Office 365 SaaS

Technology Category
  • Analytics & Modeling - Machine Learning
  • Cybersecurity & Privacy - Network Security
  • Networks & Connectivity - Network Management & Analysis Software
Applicable Industries
  • Finance & Insurance
Applicable Functions
  • Business Operation
Use Cases
  • Cybersecurity
  • Fraud Detection
Services
  • Data Science Services
  • System Integration
The Challenge
Greenhill, a renowned investment bank, was facing challenges in managing cyber risk. They were using SIEM tools but had difficulty in identifying which firewall logs were serious and which ones were not. The rise in credential abuse and account takeovers in SaaS platforms like Microsoft Office 365 was also a concern. Attackers were using social engineering to exploit human behavior, elevate account privileges, and steal critical business data. Greenhill needed more visibility into the network and an easier way to identify which threats were critical and which threats were not.
About The Customer
Greenhill and Co. is a renowned investment bank headquartered in New York City. The bank provides financial advice on significant mergers, acquisitions, and restructurings to institutions and governments worldwide. Their clients include Alcoa, Experian, Gannett, GlaxoSmithKline, and the governments of the United States, Canada, the United Kingdom, and Australia. Helping clients manage risk is core to its business. Greenhill makes it a regular practice to reduce both business and cyber risk.
The Solution
Greenhill adopted the Cognito Detect AI software, which runs on the Cognito network detection and response (NDR) platform from Vectra. Cognito Detect uses AI-derived machine learning algorithms to automatically detect, prioritize, and respond to in-progress attack behaviors that pose the highest business risk across cloud, data center, IoT, and enterprise networks. It also extracts metadata from all network traffic and enriches it with detailed security context about each attack. Cognito Detect for Office 365, running on the Cognito NDR platform, ingests activity logs from multiple Office 365 SaaS services and applies AI-derived machine learning algorithms to proactively detect and respond to hidden cyberattackers and stop data breaches.
Operational Impact
  • Ability to focus on investigations and proactive threat hunting instead of chasing-down logs
  • Confidence in identifying and stopping privilege escalation and account takeovers in Office 365
  • AI-based algorithms that save time and effort for their security staff

Related Case Studies.

Contact us

Let's talk!

* Required
* Required
* Required
* Invalid email address
By submitting this form, you agree that IoT ONE may contact you with insights and marketing messaging.
No thanks, I don't want to receive any marketing emails from IoT ONE.
Submit

Thank you for your message!
We will contact you soon.