Intezer leverages a variety of techniques to analyze evidence, however, the unique core technology is Genetic Code Analysis. This proprietary technology identifies the origins of any unknown software or piece of code, which is a critical capability for investigating security alerts. For crafting the bottom-line alert triage assessments, Intezer uses machine learning and AI models that take into account the multiple analysis results for each individual evidence, as well as information from the user’s existing security tools. Intezer’s automated alert triage process starts by collecting all evidence associated with an alert (file, process, command line, IP, URL, memory image, etc.), deeply analyzes each artifact, and then builds an overall assessment for the incident with smart recommendations.