Cyber Triage

What Cyber Triage is

Cyber Triage is an AI-powered platform for investigating cyber incidents and endpoints. It can ingest DFIR collections, EDR telemetry, and disk images, with automated workflows for targeted collection and disk-image, memory-image, and EDR telemetry imports. Guided analysis combines heuristics, more than 40 malware-scanning engines, YARA rules, and Hayabusa event-log analysis. The workflow scores artifacts and recommends related items and timeline views to help investigators scope incidents. Investigators can review automated and generative AI results with source references and explanations, and users are notified when generative AI is used. The product is available as a Windows application or self-hosted server, depending on the plan. Standard Pro costs $3,500 a year for one investigator and includes 20,000 malware scans per week. Other listed enterprise and team plans are priced by contacting sales; team plans support multiple investigators and collaborative investigations. Integrations include CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, Splunk, IBM QRadar, and IRIS, and are available with Team Edition. The seven-day evaluation includes a fully featured installer for up to two hosts, with additional time available on request. The maker identifies IR teams, SOC analysts, consultants, and law enforcement as users.