Correlate

Advanced threat hunting.

Correlate is an endpoint and network based tool set designed to identify if you have been compromised. By using advanced analytics and patent-pending detection algorithms, Correlate is able to detect threats from dormant malware to active attackers.

Correlate can be deployed for a quick assessment or installed for a longer period of time to provide pro-active protection against future threats.

Heilig Defense also offers Correlate as a service where highly trained cyber analysts will hunt on your systems looking for signs of compromise.

Please contact Heilig Defense if you would like more information about Correlate.

Close

Cyber Deception Platform

High fidelity deception made easy.

The CyDec Platform is a toolkit of highly configurable and easily manageable cyber deception capabilities designed to draw adversaries away from your valuable data and identify enemy movement within your environment. CyDec provides endpoint and network protection through the use of:

• Honey pots
• Honey creds
• Honey files
• Fingerprint spoofing
• Folder deceptions

Visit https://www.cydecplatform.com if you want to learn more about the CyDec Platform or play with a little deception yourself.

Close

Overwatch

Signature-less, network device integrity and protection.

Overwatch provides signature-less detection of infected network devices such as router and firewalls. With patent pending detection technology, Overwatch can identify network devices infected with both hardware or software implants performing a wide variety of malicious actions. These include:

• Beaconing
• Traffic shaping
• Packet modifications
• Data exfiltration

Please contact Heilig Defense if you would like to learn more about Overwatch.

Close

AppPacCap

Application Packet Capture: A better way to PCAP.

AppPacCap is an application packet capture framework designed to provide granular and targeted packet captures through a RESTful API and fully extensible front-end.

AppPacCap allows you to capture network packets at a system level, process level or thread level. AppPacCap has built in support for IP geolocation and threat intelligence queries and allows for automated captures based on process triggers.

Click here if you want to read more about AppPacCap and to download it for yourself.

Close

RansomOff

The most advanced signature-less anti-ransomware protection available.

RansomOff is a completely signature-less anti-ransomware solution designed to stop all ransomware before data is encrypted. Thanks to its advanced heuristics and detection methods, no level of code obfuscation is enough to prevent RansomOff from identifying and stopping ransomware before it has a chance to cause damage.

RansomOff is more than just stricly anti-ransomware. RansomOff contains additional advanced features such as App Lockdown, Folder Protections, and HIPS-Lite. All together, RansomOff can protect your system and data against a wide range of threats and attacks.

Visit https://www.ransomoff.com if you want to learn more about RansomOff and to try it yourself.

Close

Memory Sentry

Signature-less anti-exploit protection.

Memory Sentry provides runtime application protection against memory-safety vulnerabilities. Memory Sentry disrupts an attacker’s ability to successfully exploit software vulnerabilities that can lead to system compromise.

Memory Sentry is completely signature-less and unlike other claimed anti-exploit solutions that really just look for payload activity or specific behaviors, Memory Sentry breaks the exploit kill-chain so attacks simply fail.

Memory Sentry is still in development and portions of it is funded in part through a grant from the US Department of Homeland Security's Silicon Valley Innovation Program (SVIP).

Close