Support | Blog | Emergency IR | User Forums | Careers | Contact Us
Home > News & Events

News & Events

SC Magazine Awards 2012 Finalist

SC Awards Finalist

Media Contact

image

Anne M. Mroczynski

Senior Director of Marketing

Phone: +1.703.224.2926  Email: media@mandiant.com

Press Releases

MANDIANT Launches MANDIANT Intelligent Response v1.3

Apr 20, 2009
MIR 1.3 features advanced memory forensics, Indicator of Compromise Editor and increased scalablity, helping responders find evil faster.

 MANDIANT, a leading provider of information security products and consulting services, announced general availability of MANDIANT Intelligent Response™ (MIR) v.1.3. MIR 1.3 features expanded capabilities in advanced memory forensics, a new Indicator of Compromise Editor (IoCE) and increased scalability, allowing a single MIR Controller to simultaneously collect and manage data from thousands of Agents. The announcement was made at RSA Conference 2009 in San Francisco, one of the Information Security industry’s leading conferences and expositions.

 
MIR accelerates the collection of electronic evidence in support of incident response, electronic discovery and corporate investigations. In a time of increased regulatory pressures, MIR allows information security professionals to respond efficiently and effectively. Combining the knowledge of expert incident responders and enterprise software engineers, MIR enables precise data collection and advanced analysis in a highly scalable, multi-tier, modular appliance-based solution. MIR 1.2 was released in September 2008.
 
“MIR 1.3 continues to build on the strong foundation we have developed in previous versions,” said MANDIANT President and CEO Kevin Mandia, CISSP. “Our clients have found the combination of Agent-side filtering and advanced memory forensic features make MIR a powerful weapon in combating the Advanced Persistent Threat.”
 
MIR 1.3 features include:
 
Advanced memory forensics: With this release, MIR expands its advanced memory forensic features, allowing the Agent to pull strings from running processes, as well as files on disk.  Combined with MIR’s powerful Agent-side filtering features, responders can search for processes based on patterns of data in live memory.
 
The Indicator of Compromise Editor (IoCE): The Editor allows responders to define and search for specific host-based indicators of compromise (signatures) based on any form of data a MIR Agent can collect.  The specified searches can collect information from tens, hundreds or thousands of hosts, and rapidly identify where a breach may have occurred.  Searches can be implemented using existing MANDIANT indicators, user-defined indicators or a combination of both.  Using MIR’s memory forensic capabilities responders can rapidly craft advanced indicators to Find Evil when traditional prevention and detection capabilities fail.  
 
Enhanced scalability:  This release builds on MIR’s already-robust collection and search capability.  Responders now have the option to use Labels and Search folders to group hosts and run large data collection jobs, managing thousands of hosts through the Console.  
 

About MANDIANT

MANDIANT is the information security industry’s leading provider of incident response and computer forensics solutions and services. Headquartered in Alexandria, Va., with offices in New York, Los Angeles, San Francisco and Reston, Va., MANDIANT provides products, professional services and education to Fortune 500 companies, financial institutions, government agencies, domestic and foreign police departments and leading U.S. law firms. MANDIANT comprises one of the industry’s largest incident response and forensics forces. The authors of eleven books, MANDIANT security consultants and engineers hold top government security clearances and certifications and advanced degrees from some of the most prestigious computer science universities. To learn more about MANDIANT visit www.mandiant.com, read M-unition, the company blog: http://blog.mandiant.com, or follow on Twitter @MANDIANT.

Home > News & Events

Washington, DC Headquarters:

Phone: +1.703.683.3141
Toll free: 1.800.647.7020

Office Locations:

Washington, DC
New York
Los Angeles
San Francisco
Reston, VA
© 2011 MANDIANT Corporation. All Rights Reserved.