Skylight Interceptor

Overview

Skylight Interceptor is a cloud based network detection solution that is part of the Skylight platform, working alongside Skylight analytics. Interceptor consumes data the same way analytics does, and is easily added to your analytics deployment.

Interceptor will assist you by detecting threats, providing alerts and correlating alerts into incidents. The alerts and incidents are represented against the Mitre ATT@CK Matrix so that the progression of a threat can be interpreted easily.

No Installation Required

This is an add-on solution and there is no need to install! Simply contact your Skylight solutions sales representative to have Interceptor deployed on the backend. Once it is available you will be able to access it by going to: Settings ▶ Policies ▶ Detections.

For more information on Interceptors features and functionalities and to learn how to use this detection service in your network, please read the articles below:

Incidents
Alerts
Events
Inventory Security Assets
Detections
Allowlisting
Threat Feeds