Automated investigation and incident response company Binalyze OÜ today announced the launch of Magellan, a new capability that brings “e-discovery” of file contents directly into the security operations center to help close content blind spots for organizations.

The new release seeks to address the issue whereby, despite years of investment in detection technologies such as endpoint detection and response, extended detection and response, and security information and event management, most SOCs investigate incidents without direct visibility into file contents. Binalyze argues that the reliance on metadata such as filenames, hashes and access logs blinds investigators to crucial context such as what actual data was involved, how it was misused and what the potential consequences are.

Binalyze’s new Magellan offering tackles the issue with investigative e-discovery capabilities at the endpoint. They allow teams to go beyond detecting suspicious activity to determine the true potential impact of an incident without affecting the speed of an investigation. Unlike legacy solutions, Binalyze says, Magellan removes the need to centrally index and create copies of data that already exists so security teams can search and examine the contents of files across endpoints and hybrid environments in real time.

“Detection tools are excellent at telling teams that something suspicious happened. What they rarely show is what data was actually involved,” said founder and Chief Executive Emre Tinaztepe. “By bringing e-discovery-like capabilities directly into the investigation workflow, Magellan allows analysts to search inside files and quickly understand what information may have been exposed or misused.”

Magellan is embedded within the Binalyze automated investigation and response platform to enable distributed full-text search directly on the device where the data resides. Using Magellan, security teams can quickly examine file contents across large environments to gain a full picture of the extent of a breach and what data is at risk.

The new offering also helps security teams to spot issues before breaches occur, particularly when confidential files are being accessed by users who wouldn’t usually have authorization to access them.

Binalyze has raised $31.2 million in funding, including a round of $19 million in September 2023. Investors in the company include Molten Ventures, Earlybird Digital East Fund I GmbH, OpenOcean Capital Management Pte. Ltd., Cisco Investments Inc., Citibank Global Corporate Investments Inc. and Deutsche Bank Ventures.

Image: Binalyze