SOLUTION BRIEF

Stellar Cyber for OT Environments
Protect OT and IT Environmentswith a Single PlatformDefending your IT environment from a significant breach isthe de-facto objective for all security teams, regardless ofindustry. However, security teams for organizations in
specific sectors, such as manufacturing and energy, mustgo above and beyond this objective and protect an
Operational Technology (OT) environment. Typically thesesecurity teams must manage two distinct security stacks
to protect these different environments, which increases
the complexity and cost of delivering consistent securityoutcomes that reduce risk. With Stellar Cyber, you can use
a single platform and a single license to protect your OT and ITenvironments simultaneously.
The Stellar Cyber Open XDR Platform is a threat detection
and response platform that works with all your existing
security tools, natively creating visibility and real-timethreat detections in your hard-to-reach OT environments.

NG-SIEM

ThreatIntelNDR

IDS &Malware
Analysis

SOAR

Open XDR Platform

Using Stellar Cyber to secure your IT and OT environments
means fewer vendors making your security budget gofurther. With all data and security operations consolidated
into a single platform, security analysts’ productivity will
increase from day one.

Attack Surface Areas Covered By Stellar Cyber
Attack Surface
Area

SCADA Networks

CategoryOT

Stellar Cyber
Components Deployed

Stellar Cyber Security
Sensors, Integration
with any existing OT
telemetry source

Detection Techniques Employed••
•
•
•
•
•

SCADA / IT DMZOT / IT

Stellar Cyber
Server Sensors••
EnterpriseIT Networks(Identity, Cloud,Endpoints, Email)

ITStellar Cyber Security
Sensors, Stellar Cyber
Server Sensors, 3rd party
integrations

AllOT / IT

Incident Correlation••

DPI Engine understands 50+ SCADA protocols
NDR identifies anomalous communication paths
Custom security rules to detect non-standard
protocol use or non-standard communication paths
IDS detects active exploits
Malware Sandbox detects the presence of malware
on the network
OT asset visibility (MES, HMI, PLC, RTU, etc.)
via asset discovery
Streamline collection of security and audit logs
from Windows and Linux servers acting as the DMZ
between OT and IT
Hundreds of out-of-the-box detections, MachineLearning and rule based, detecting malicious files,
lateral movement, anomalous access, and more
Generate telemetry (network ﬂow, DPI),
collect telemetry (log forwarding, audit logs),
and edge detections (IDS, Malware Sandbox)
via Stellar Cyber Sensors
Hundreds of out-of-the-box detections, Machine
Learning and rule based, detecting malicious files,
lateral movement, anomalous access, and more
Correlation of detections, regardless of their attack
surface source - OT or IT - into a single Incident for
efficient, comprehensive threat detectionwww.stellarcyber.ai | sales@stellarcyber.ai

Deployment Model
To achieve complete coverage across all OT and IT environments, Stellar Cyber’s Sensors and 3rd Party Integrations
are deployed throughout an organization.
Stellar Cyber
Open XDR
Platform

SecureTransmissionof Data

OT Environment

DMZ

IT Environment

Stellar Cyber
Security Sensors

Stellar Cyber
Server Sensors

Stellar Cyber Sensors,
3rd Party Integrations

Identity

PLC/RTUs

Controls

DMZ Hosts

EmailCloud

Data Center

Endpoint

Stellar Cyber Open XDR Core Capabilities
Ultra-Flexible
Data-Sourcing

Incorporate data from any existing security control, IT, OT, and productivity tool
into Stellar Cyber using pre-built integrations with no human intervention.

Sensor-driven
Data Collection

Use the proprietary Stellar Cyber sensors to collect raw OT and IT network telemetry
and log data to identify additional threats not seen by your existing security stack.

Purpose-built Data
Normalization andEnrichment

Data from any source is automatically normalized and enriched with context such as threat
intelligence, user information, asset information, GEO location by Stellar Cyber to enable
comprehensive, scalable data analysis.

AutomatedThreat Hunting

Using easy-to-understand querying formats, security analysts can create customized threat
hunts that can be run ad-hoc or on a set schedule.

Multi-modal Threat
Detection Engine

Identifies complex threats using a combination of supervised and unsupervised machine learningand automated threat hunting to deliver the most comprehensive view of threats possible.

Machine Learning
Correlation

Using graph machine learning techniques, seemingly disparate alerts are combined into
incidents providing security analysts with contextualized and prioritized threats to investigate.

GuidedInvestigations

Correlated OT/IT incidents include the underlying data and context a security analyst needs
to complete investigations fast, increasing efficiency and effectiveness.

Deterministic
Incident Response

Using predefined response actions or customizable response playbooks, security analysts cantake decisive response actions manually or fully automate responses on the same platform.

Stellar Cyber Open XDR delivers world-class, comprehensive, unified security without complexity, empowering security
teams of any size and skill to deliver continuous security. With Stellar Cyber organizations reduce risk with early and precise
identification and remediation of threats while slashing costs, retaining investments in existing tools, and improving analyst
productivity, delivering a 20X improvement in MTTD and an 8X improvement in MTTR.

www.stellarcyber.ai | sales@stellarcyber.ai