#Sentinel technologies full

Manageability is improved using simple UI driven controls to allow deployment at scale and planted honeytokens blend in with existing environment making it hard to differentiate between a honeytoken and its real counterpart. Additional benefits include wider detection coverage since honeytoken objects are embedded throughout the environment. Detection principles remains the same, because there is no legitimate reason to access a honeytoken, any activity indicates the presence of a user who is not familiar with the environment, and could potentially be an attacker.īecause no dedicated infrastructure is required, overall costs to the customer are reduced. This solution moves away from traditional approaches and uses the concept of ‘honeytokens’ by injecting decoy objects into existing workloads. We are excited to announce the Microsoft Sentinel Deception Solution is now in public preview. Introducing the Microsoft Sentinel Deception Solution

As our customers continue to shift workloads to Azure, using cloud native capabilities to digitally transform their business, we wanted to offer a solution which can help customers fully leverage the potential this brings in terms of visibility, manageability and reduced cost of ownership. Yet we know there are tangible security benefits with the use of deception. Furthermore, unless significant efforts are made to make the environment look convincingly real, signals giving away the synthetic environment are easy to spot. Security monitoring would trigger an incident for any activity detected as this infrastructure should never be accessed under normal circumstances. Deployment of dedicated infrastructure is costly, both in terms of the assets deployed and associated management overheads. Traditional approaches to deception, often referred to as ‘honeypots’, involved provisioning dedicated infrastructure including servers, databases, and other resources to mimic existing workloads. By planting decoy resources in strategic locations and with heightened monitoring, defenders can lure an attacker in, forcing them to reveal their presence when they would otherwise remain undetected. Whether it’s social engineering or spear phishing, deception plays a major part in most cyber-attacks impacting our customers today. But deception is a two-way street and defenders can use it to their advantage.

#Sentinel technologies full

The capability, however, has proven to be flexible in adapting to humanitarian crisis roles, such as mapping and scaling the flood crisis that hit Southern England in early 2014.Among the most successful and well used techniques the adversary has in their toolbox is an attack which involves some form of deception, knowing full well the human vulnerability and ease of which it can be exploited. The platform is a recognized force multiplier that enables commanders to direct the most effective utilization of the assets at their disposal.īased on a Global Express business jet manufactured by Bombardier and modified by Raytheon UK, the Sentinel R1 aircraft was originally intended for conventional war-fighting operations, to track armored formations and conduct strategic reconnaissance tasks. The fleet of five special mission aircraft house an innovative airborne mission management system that provides troops with continuous 24-hour wide area, all weather, air-to-ground surveillance capabilities by scanning areas from a safe 'stand-off-distance,' safeguarding coalition forces by delivering actionable, accurate, information.

By operating at high altitude, and at considerable long range stand-off distances, the radar platform is able to remain over safe territory while providing an excellent “look-down” angle of the target area. The imagery is passed by secure data links to ground stations at all levels of command and control. Operated by the Royal Air Force’s No5 Army Cooperation Sqn, the Airborne Stand-off Radar system incorporates the Sentinel and ground components with the aircraft’s powerful active electronically-scanned array 'dual mode' surveillance radar, combining the best in ground moving target indicator and synthetic aperture radar imagery, for unparalleled situational awareness. The Sentinel R Mk 1 fleet is a key C4ISTAR asset for the UK’s armed forces. Sentinel’s onboard Airborne Stand-Off Radar, or ASTOR, reconnaissance system delivers accurate target information and speeds decision-making. Retaining unparalled situational awareness