DATASHEETTripwire and LinkShadow
LinkShadow integrates with Tripwire solutions to complete the full cycle of

Key Features» Detects if an insider modifies
critical files» Gets intelligence into bothcommodity and targeted
attacks» Gains visibility on the remoteworkers» Provides insights on theendpoint file tampering or
malicious activities

behavioral analytics and threat hunting, providing the combined benefitsof Tripwire’s file integrity monitoring (FIM) technology and proactive threat
detection.

Next-Generation Cybersecurity
Analytics
LinkShadow ® Cyber Security Analytics
Platform is designed to manage threats
in real time. It utilizes AI-based machinelearning to analyze events and perform
UEBA. Cutting-edge threat hunting
provides state-of-the-art cyber event
anticipation.

Integration Use Cases
Suspicious File Access &Tripwire Enterprise
Using the Tripwire® Enterprise/
LinkShadow integration, customers canreceive the following benefits:» Compliance audit reports showing
how business compliance goals areor are not being met on individual
systems, with details to correct» Faster resolution and investigationby combining LinkShadow anomalies
with data from Tripwire Enterprise:
what changes were made, who madethe them, and when.

» Prioritized criticality of a given changethat enables more rapid response bycombining LinkShadow anomalies
with Tripwire Enterprise results.
Tripwire Enterprise feeds LinkShadow
with enriched detection of file events
to hunt for any suspicious file accessby anomalous users. With Shadow360

Dashboard, the analyst gains full visibility on all user activities before and after
the suspicious file access behavior.

Anomalous File Tampering
LinkShadow gains full visibility of filetampering activities on endpoints from
Tripwire Enterprise. LinkShadow injects
this intelligence into the machine learning algorithms to identify suspicious
and anomalous activities based on the
behavioral analysis. File tampering can
indicate the early stages of an attack.

Suspicious File Access &Tripwire IP360
The Tripwire IP360™ and LinkShadow
integration provides following benefits:» Asset inventory list provided to
LinkShadow» Detailed software inventory on
individual systems» Vulnerabilities of the OS and thesoftware installed on the system» Accurate CVE records related to thevulnerability, including Tripwire riskscore

» Prioritized systems by combining
LinkShadow anomalies, Tripwireidentified vulnerabilities, and thecriticality of the systems

FOUNDATIONAL CONTROLS FORSECURITY, COMPLIANCE & IT OPERATIONS

Fig. 1 With LinkShadow’s Shadow360 Dashboard, analysts gain full visibility on alluser activities before and after the suspicious file access behavior.

Fig. 2 LinkShadow gains full visibility offile tampering activities on endpoints
from Tripwire Enterprise.

LinkShadow was created by a team of highly skilled experts, solution architects, productspecialists and programmers to formulate a next-generation cybersecurity solution thatprovides unparalleled detection of even the most sophisticated threats.
LinkShadow was built with the vision of enhancing organizations’ defenses against
advanced cyber-attacks, zero-day malware and ransomware, while simultaneously gaining
rapid insight into the effectiveness of their existing security investments.

Tripwire is the trusted leader for establishing a strong cybersecurity foundation. We protect the world’s
leading organizations against the most damaging cyberattacks, keeping pace with rapidly changing techcomplexities to defend against ever-evolving threats for more than 20 years. On-site and in the cloud, ourdiverse portfolio of solutions find, monitor and mitigate risks to organizations’ digital infrastructure—all
without disrupting day-to-day operations or productivity. Think of us as the invisible line that keeps
systems safe. Learn more at tripwire.com
The State of Security: News, trends and insights at tripwire.com/blog
Connect with us on LinkedIn, Twitter and Facebook©2021 Tripwire, Inc. Tripwire, Log Center/LogCenter, IP360, Tripwire Axon and others are trademarks or registered trademarks of Tripwire, Inc. All other product and company
names are property of their respective owners. All rights reserved.
TAPLS1a2101