1
Automated Insights & Explanations
Abnormal’s decision engine will explain and summarize the automated analysis of the 1,000+ signals, heuristics and sub-models that were used to detect the attack.
2
Intelligent Attack Classification
Abnormal recognizes attack strategies, tactics & targets, and will classify each attack across these dimensions to provide superior analytics and insights.
3
Content & Language Analysis
Abnormal analyzes email content and attachments using natural language processing to understand sophisticated attacks by identifying entities, topics, tone and sentiment.
4
Dynamic Identity Resolution
Abnormal automatically cross-references employee directories and contact lists to identify suspicious signals and uncover impersonation or account compromise.
5
Business Relationship Analysis
Abnormal uses the Relationship Graph to map relationships between employees, departments, vendors and external organizations.
6
AI Attack Detection
Abnormal’s detection engine is powered by hundreds of sub models and thousands of data signals in an ensemble machine learning architecture to detect the broadest range of attacks with minimal false positives.
Threat analytics, insights and reporting