Download PDF

Rapid7 > Case Studies > Ezenta and Rapid7 Help Chr. Hansen Gain Security Visibility

Ezenta and Rapid7 Help Chr. Hansen Gain Security Visibility

Technology Category

Cybersecurity & Privacy - Intrusion Detection
Cybersecurity & Privacy - Malware Protection
Cybersecurity & Privacy - Security Compliance

Applicable Industries

Food & Beverage
Agriculture
Pharmaceuticals

Applicable Functions

Business Operation
Quality Assurance

Use Cases

Intrusion Detection Systems

Services

Cybersecurity Services
System Integration
Training

The Challenge

Søren Hansen, the IT Security Manager at Chr. Hansen, faced significant challenges in gaining visibility into user activities on the network and detecting intrusions. The company needed a solution that could alert them to suspicious network activity and streamline incident investigations. The primary challenge was to find a tool that could provide detailed insights into anomalous behavior, such as stolen credentials and lateral movement, without overwhelming the team with excessive alerts. Additionally, the solution needed to be easy to deploy and manage, without requiring additional agents on endpoints.

About The Customer

Chr. Hansen is a 140-year-old company headquartered in Denmark, with a global presence. The company specializes in developing natural ingredient solutions for various industries, including food, nutritional, pharmaceutical, and agricultural sectors. With a strong focus on innovation and quality, Chr. Hansen has established itself as a leader in its field. The IT security team, led by Søren Hansen, is responsible for maintaining the security of the company's extensive network and ensuring compliance with industry standards. The team collaborates closely with external security advisors to enhance their security posture and address emerging threats.

The Solution

To address the visibility and security challenges, Chr. Hansen partnered with Ezenta, a specialized IT security company. Ezenta recommended Rapid7 UserInsight, an intruder analytics solution designed to provide comprehensive visibility into user activities and detect suspicious behavior. The solution was deployed agentlessly, ensuring minimal disruption to the existing IT infrastructure. UserInsight's ability to generate manageable alerts and detect stealthy attack methods, such as stolen credentials and lateral movement, proved invaluable. The solution also utilized the results of over 50 virus scanners to identify known malware, covering blind spots in traditional antivirus solutions. With Ezenta's guidance, the proof of concept ran smoothly, and Chr. Hansen quickly realized the value of UserInsight in enhancing their security program.

Operational Impact

UserInsight provided Chr. Hansen with detailed visibility into user activities and network anomalies, enabling the IT security team to detect and respond to potential threats more effectively.
The solution's ability to generate a manageable number of alerts (three to five per day) ensured that the team could focus on investigating genuine security incidents without being overwhelmed by false positives.
The agentless deployment of UserInsight minimized disruption to the existing IT infrastructure and eliminated the need for additional endpoint agents, resulting in a seamless integration process.

Quantitative Benefit

UserInsight generated approximately three to five alerts per day, ensuring a manageable workload for the IT security team.
The solution utilized the results of over 50 virus scanners to detect known malware, providing comprehensive coverage and reducing the risk of undetected threats.