Cyber Triage Enterprise

Cyber Triage Enterprise is a digital forensics and incident response platform designed for endpoint triage and full investigations. The platform provides automated analysis capabilities that include 40+ malware engines, Yara Rules, Hayabusa, and baseline filtering.

The Enterprise tier adds integration capabilities to both Standard (desktop application for single users) and Team (self-hosted server for multiple users) versions. These integrations allow security teams to import EDR telemetry directly into Cyber Triage for analysis, connect custom threat intelligence feeds, and publish investigation findings to case management systems.

The platform supports DFIR data collection, EDR telemetry review, automated analysis, and result publishing. For SOC analysts, it enables quick endpoint triage after alerts to determine incident scope. For DFIR teams, it serves as a centralized investigation platform.

The Enterprise version of Team includes incident-level role-based access control, allowing organizations to restrict access to investigation data based on user authorization. This supports compliance requirements and protects sensitive data during investigations.

Results and indicators of compromise can be forwarded to case management systems and threat intelligence platforms via APIs, enabling findings to improve detection across the security stack.