Get Cyber Triage

Cyber Triage is licensed by the number of investigators.

Standard

Desktop, single-user application for fast and comprehensive investigations.

Standard
Pro

Essential automated features for a single investigator.

$3,500/year

Buy Now

Standard
Enterprise

Standard Pro plus integrations to import and publish results.

Contact Sales

Get Quote

Team

Self-hosted server to enable collaboration and increased scalability.

Team
Pro

Essential automated features for multiple investigators.

Contact Sales

Get Quote

Team
Enterprise

Team Pro plus integrations to import and publish results.

Contact Sales

Get Quote

Feature Summary	Standard Versions		Team Versions
	Standard Pro	Standard Enterprise	Team Pro	Team Enterprise
Agentless, Adaptive Collector
Automated Analysis and scoring
Assisted Examination
Reporting
Collaborative investigations
Streaming ingest
Centralized processing
Import EDR telemetry
Publish IOCs
Incident-level access control

All versions come with Adaptive Collection, Automated Analysis, Assisted Examination, and reporting.

Full Feature Breakdown

Adaptive Collection

Adaptive Collection	Standard Pro	Standard Enterprise	Team Pro	Team Enterprise
Collects volatile and file system data.
Agentless collection.
Collect to and from USB.
Collect over the network.
Collect to S3 bucket.
Imports disk images.
Imports KAPE output.
Imports logical files.
Imports memory images.
Queue up multiple file-based collections.
Queue up multiple network-based collections.
Streaming ingest for EDR deployments.
Triggered by SIEM or SOAR.
Import EDR telemetry.

Automated Analysis

Automated Analysis	Standard Pro	Standard Enterprise	Team Pro	Team Enterprise
Uses hundreds of heuristics to identify suspicious items.
Uses 40+ malware scanning engines.
Malware scanning limits.	20,000/week	20,000/week	4,000/day	4,000/day
Detect malware using ReversingLabs.
Analyzes files using Yara rules.
Hides known good items with allow lists.
Flags IOCs with bad lists.
Analyzes several hosts simultaneously.
Synchronize threat intelligence lists across all clients.
Synchronize IOCs with threat intelligence platforms.

Assisted Examination

Assisted Examination	Standard Pro	Standard Enterprise	Team Pro	Team Enterprise
Manually score an item as good or bad.
Recommends additional items based on scoring.
Pivot through collected data to determine scope.
View timeline of threats to get context.
Correlates with a single user’s previous collection to determine how common item is.
Groups hosts by incident for better reporting and correlation.
Collaborate and share data among the team.
Correlates with all users’ previous collections to determine how common item is.

Publishing

Infrastructure

Request Quote

Key Features

EDR

Integrations

Recent Releases

Get Cyber Triage

Standard

Standard
Pro

Standard
Enterprise

Team

Team
Pro

Team
Enterprise

Feature Summary

Full Feature Breakdown

Publishing	Standard Pro	Standard Enterprise	Team Pro	Team Enterprise
Generates HTML, Excel, and CybOX reports.
Produces JSON report that can be imported into SIEMs.
Custom report branding.
Publish IOCs to case management.

Key Features

EDR

Integrations

Recent Releases

Get Cyber Triage

Standard

Standard Pro

Standard Enterprise

Team

Team Pro

Team Enterprise

Feature Summary

Full Feature Breakdown

Standard
Pro

Standard
Enterprise

Team
Pro

Team
Enterprise