Israel's KELA Targeted Cyber Intelligence, a global Dark Net threat intelligence provider, announced on May 13 the addition of Featured Queries to DARKBEAST – their proprietary Dark Net search engine and investigation platform — helping users stay informed on the most relevant underground threats.
KELA's DARKBEAST search engine helps enterprises and law enforcement agencies perform real-time researches and investigations straight from KELA's data lake of highly qualified and curated sources, saving them the time of locating and accessing those sources on their own.
DARKBEAST gives users one place to safely search and retrieve intelligence straight from the Dark Net with zero latency. Sources are cached into KELA's data lake and accessible through DARKBEAST, where users can search through underground forums and markets, information sharing sites, instant messaging platforms, hacking repositories, and much more.
Everything is perfectly structured for the users so that they can pivot through various data points and indicators and fine tune their searches, providing them immediate access to the most relevant and up-to-date intelligence, according to KELA.
DARKBEAST is used for a number of purposes both internally, by KELA's intelligence analysts, as well as by partners. David Carmiel, KELA's CTO, said "Our partners use DARKBEAST to support them in investigating threat actors or supply chain threats, enriching vulnerability data, incident response, and much more. We wanted to come up with a way to guide our partners in their research and investigation processes by sharing some of our Dark Net and intelligence expertise with them, without having them rely solely on our analyst services."
"We then realized that creating a set of 'featured queries' through DARKBEAST, could be something very relevant to many of our partners and would also give us a way to push intelligence that is trending in the Dark Net at the moment. We're leveraging this now to keep our partners up to date on COVID-19-related campaigns," he said.
Currently, the Featured Queries include COVID-19-related campaigns; the latest ransomware victims as discussed in the Dark Net; and chatter regarding common vulnerabilities and exposures (CVE) exploitations. These queries change rapidly in accordance with trends that KELA's analysts monitor daily, according to the company.
"As a team of primarily intelligence experts, our main goal is not just to provide our technology, but also to be a partner of all of our clients and assist them in their intelligence processes along the way. The Featured Queries essentially allows us to do just that: share our knowledge and make sure that our partners are getting the most out of our technologies," Carmiel said.