Phantom Tech Session featuring Cymmetria

Please join us for our next live Phantom Tech Session, happening tomorrow at 12:00PM ET / 9:00AM PT.

In this Tech Session, we will discuss cyber deception and provide a demonstration of Cymmetria’s MazeRunner platform. We’ll also explain the integration between the Phantom security automation and orchestration platform and the Cymmetria platform, including insights into the App development experience from the Cymmetria team.  This is particularly interesting as the integration required new capabilities within Phantom, such as:

  • Uploading of files to endpoints from the Phantom platform
  • Implementing a web server from within a Playbook
  • First-ever design of automated Playbooks leveraging deception technology

The Cymmetria team will explain how, using Phantom Apps and Playbooks, they were able to implement the required new functionality.

Sample playbook illustrating Phantom-Cymmetria integration and deployment of artifacts to endpoints.

From Cymmetria:

Cymmetria’s MazeRunner detects APTs or bots making lateral movement within an organization’s network. MazeRunner creates enterprise-grade deception campaigns that match business processes within an organization. The deception campaigns are made of centrally managed decoys and breadcrumbs. Breadcrumbs lead the attackers to decoys, and when an attack is executed on a decoy, forensic data is gathered. Attack signatures are generated and made available to an organization’s existing security tools to stop the attack within the organization.

Having already caught multiple APTs at customer sites (e.g. Patchwork), MazeRunner Enterprise Edition now integrates with Phantom to automatically deploy breadcrumbs to endpoints, thereby allowing Phantom users to orchestrate the deployment of a full deception campaign. In the upcoming weeks, a new Community Edition of MazeRunner will be released, allowing the broader security community to experiment with deception campaigns orchestrated by Phantom.

We are excited to have Cymmetria joining us to talk about deception campaigns, their offering, and their App integration with Phantom. We hope to see you there!

To register for this or any future session, visit our Phantom Tech Session registration page.

Robert Truesdell
Director, Product Management