- Is Perch a TIP?
- Perch is not a Threat Intelligence Platform. You could think of a TIP as an intelligence server, and Perch as an intelligence client. You can use Perch with a TIP, but a TIP is not required – Perch works perfectly well without one.
- All you need to make Perch work for you:
- A membership with an intel sharing community (like an ISAC or ISAO)
- A Perch subscription with a Perch sensor of your choice at each location
- You do not need to purchase any other equipment or hire analysts for Perch to work.
- Absolutely. Perch can pull threat intelligence data from any platform, especially a TAXII/STIX source. The Perch sensor can also be setup as a source of Alerts for your corporate SIEM.
- Perch streamlines the detection process, communications with other community members, and facilitates interaction with alerts. Perch also allows you to connect with other TIPs, other communities; and lets you visually sort and filter alerts from each of your intel sources.
- Glad you asked! Here are some of our faves:
- A Managed Security Services Provider would deploy Perch to their customers to provide a single pane-of-glass view of what threats their MSSP service customers are detecting. MSSP customers could also use Perch to connect back to the MSSP’s TIP for intelligence acquisition to be used for detection.
- An FS-ISAC member would use Perch to connect to the FS-ISAC’s Soltra Edge instance to automatically detect what the FS-ISAC is sharing.
- An analyst working for ISAC or ISAO would use Perch to see what the FS-ISAC members are seeing (telemetry data sent back by Perch).
- An analyst working at an ISAC or ISAO member firm would use Perch to identify who else is seeing the same threat they are.
- A USA company would use Perch to connect to DHS AIS to automatically detect AIS content.
- Your Perch sensor will be monitored around the clock by analysts who work with communities every day. Since we only manage members of sharing communities, we’re quite specialized in responding to the types of alerts community members face, and escalating serious threats when they rear their heads.
Still have questions? Email us.