Searchlight Cyber adds ransomware leak site visibility with Ransomware File Explorer – News

External cyber risk management tools company Searchlight Cyber Ltd. today announced the release of Ransomware File Explorer, a new capability within its Cerberus investigation platform that provides direct, searchable visibility into file-tree data published on ransomware leak sites.

The new feature allows analysts to quickly determine whether sensitive documents, personally identifiable information or intellectual property have been exposed. It also supports preemptive detection to help organizations uncover third-party or supply-chain exposure even when they are not the direct victim of a ransomware attack.

Ransomware File Explorer has been designed to allow security and incident-response teams to rapidly identify potentially compromised files without needing to access or process malicious ransomware archives directly. As a result, organizations can act faster and reduce operational, legal and reputational risk.

Core to the offering is the ability to search through and identify file structures shared on ransomware leak sites, a process that before now has been time-consuming for internal teams.

Ransomware File Explorer securely ingests and indexes file-tree data directly into Cerberus, allowing analysts to identify and access file trees across inconsistent ransomware group leak sites and preemptively detect leaked PII and intellectual property through rapid file name search and automated alerting.

The service also assists in accelerating incident response by assessing exposure early, even when a partner, supplier or affiliate has not disclosed a breach.

With Ransomware File Explorer, enterprise security teams and managed security service providers gain access to fast, reliable insight during high-pressure investigations and a preemptive, intelligence-driven approach to ransomware defense and supply-chain risk management.

“Our research shows that the ransomware threat facing organizations continues to grow, with more active groups, victims, and a tougher landscape to monitor,” said co-founder and Chief Technology Officer Dr. Gareth Owenson. “By adding the ability to instantly search the file trees of data published on ransomware leak sites, we’re giving security teams the power to detect when they’ve been exposed in the blast radius of a ransomware attack and take action, even when they are not the direct target.”

Searchlight Cyber is a venture capital-funded startup that has raised external capital, including a strategic growth investment led by Charlesbank Capital Partners, in January 2024.

Image: Searchlight Cyber