Mimecast Incydr

Incydr is a SaaS insider threat detection and response solution acquired by Mimecast from Code42, designed to enable companies to mitigate data risk exposure and exfiltration risk, in a way that does not interfere with legitimate collaboration. Incydr includes an agent that constantly monitors file activity on Macs, Windows, and Linux devices and also provides integrations to corporate cloud resources (e.g. Box, Drive, etc.) and cloud email suites (e.g. Google Workspace, Office 365, etc.).

Incydr detects data risk across computers, cloud and email

• Sync activity to cloud applications like Dropbox and iCloud
• Uploads to personal email and other sites through web browsers
• Files sent through Airdrop or accessed by web apps like Slack
• Sharing from corporate cloud services like GoogleDrive, OneDrive and Box
• Email attachments from corporate Office 365 or Gmail

Risk Exposure Dashboard

• A company-wide view of suspicious file movement, sharing and exfiltration activities by vector and file type.
• Reveals the top employees whose file activity needs investigation as well as concerning remote employee activity.
• Investigate Insider Risk as well as identify security awareness gaps, Shadow IT and policy violations.

Risk Detection Lenses

• A view of activity for a subset of users who are at a higher likelihood of putting data at risk.
• Examples include users experiencing an employment milestone, such as departure, or who have risk factors that require closer monitoring, such as contractors.
• Adding users to a lens kicks off system alerts and user management workflows so you can programmatically protect data when it is most vulnerable.

High-Fidelity Alerts

• Provide comprehensive event, file, vector and user information to quickly assess priority.
• Can be emailed or sent to your system of record and are triggered based on a number of file and event criteria.
• Alerts rules determine when you are notified by Incydr and not what activity is monitored. This ensures there are no gaps in context during Insider Risk investigations.