Why Salem?

Salem uses AI decision intelligence to investigate your cyber alerts and surface the few that require your immediate attention. This can help you to:

• Increase coverage of current cyber operations by analyzing use cases of all severity types. Salem can help expand your scope by supporting a broad range of alert use cases covering endpoint, identity, cloud, and network activity.
• Detect threats faster by lowering mean-time-to-detect (MTTD) malicious activity. Operating at machine speed, Salem gets to work on each alert it receives immediately and swiftly escalates the ones that matter directly to you.
• Reduce SOC analyst fatigue by automatically analyzing alerts at machine scale, 24/7. This can free up your security team to refocus on high-impact work such as developing advanced detection rules, researching TTPs & tools, and incident response.

How does Salem work?

1. Salem investigates alerts from your existing SIEM, EDR, and other threat detection tools. By analyzing the alerts generated by these tools, Salem identifies potentially malicious activity based on known TTPs and deviations from established behavioral norms.
2. Salem’s AI is trained to follow the investigation paths of a seasoned cyber analyst to identify real threats quickly & consistently. Salem comes pre-trained so it can immediately provide value upon deployment. From there, Salem investigates every alert it receives at machine speed, 24/7, without fatigue.
3. Salem learns and applies your business context to improve situational awareness for each alert. All of your data & context does not go on to train Salem’s AI models; rather, Salem keeps this information within your environment to aid future investigations. As Salem learns, it produces more precise alert escalations and seeks less feedback from your security team.

How has Salem impacted clients?

Salem is currently serving a US-based, Fortune 100 pharmaceutical manufacturer, supporting detections generated across 65,000 global endpoints. Salem has proven to be valuable in correctly validating cyber threats and quickly escalating those threats to incident responders (average is ~2 minutes). Salem also:

1. Escalated 1 alert for every 70 it investigated
2. Identified threats 24x faster than the existing managed security service
3. Caught the red team red-handed on 3 separate occasions