Airlock Digital

Practical Allowlisting and execution control that works.

[Daniel Schell @danonit]

I've put up a blog on the DigiCert incident as well as the Microsoft definition false positive. This includes some analysis and VT links to samples that have actually been signed by the compromised certificates. https://t.co/e2eQHpwPcm

[Daniel Schell @danonit]

Video showing how @AirlockDigital prevents TTPs such as the DLL search order used to load an attacker controlled DLL into a trusted application from the compromised CPU-Z website last week.
https://t.co/u3q3ptN6AT

[Daniel Schell @danonit]

Signature-based control breaks down with agentic AI.

Block one path → it tries another. Different method. Same outcome.

That’s why control needs to be on the endpoint - and focus on capability AND execution.

My blog (with videos) here:
https://t.co/vfud5Ppfga

[Airlock Digital @AirlockDigital]

Excited to attend our first #FalConEurope, meeting our existing partners and customers in the region and showing the @CrowdStrike community how we make allowlisting achievable.

[CrowdStrike @CrowdStrike]

🤝 Our partner ecosystem is at the forefront of #cybersecurity, and our partners play a major role in #FalConEurope.

👏 Thank you to all Gold sponsors of Fal.Con Europe, including:
▶ @1Password
▶ @AcalvioTech
▶ @Accenture
▶ @AirlockDigital
▶️ @Cloudflare
▶ @Commvault
▶️ @EYnews
▶ @gytpol
▶ @hunters_ai
▶ @NagomiSecurity
▶ @NETbuilderLTD
▶ @ninjaone
▶ @obsidiansec
▶ @preludeorg
▶ @SaltSecurity
▶ @tines_hq
▶ @torq_io
▶ @WestconComstor

🔗 Meet and network directly with our sponsors in The Hub at Fal.Con Europe: https://t.co/eIXveNmRU0

[Sekuro @WeAreSekuro]

We’re excited to announce our Platinum sponsors for #Sekurokon2024: @AirlockDigital, @CrowdStrike and @Netskope! Join us to explore cutting-edge tech in endpoint, network, data, cloud security & threat intelligence. Contact your #Sekurian account manager to register!

[CrowdStrike @CrowdStrike]

Thanks to our Fal.Con 2020 #cybersecurity conference Silver sponsors! @Googlecloud, @Safeguard_Cyber, @AcalvioTech, @CDWCorp, @TrueFort, @Mimecast, @Optiv, @AirlockDigital, @DomainTools, @AttivoNetworks and @DLTSolutions https://t.co/TQ266twmKU #FalConExperience

[Sekuro @WeAreSekuro]

Last year, 93% of breaches within APAC were a result of vulnerability exploitation. How can we then leverage application controls as a proactive defence? #Sekuro and @AirlockDigital co-hosted a roundtable yesterday to discuss.

[Daniel Schell @danonit]

https://t.co/LvbBhTiLt3
@AirlockDigital customer guidance for AnyDesk incident. TBS hashes and compromised file metadata included.

[Seth Kusiak @Collab_Seth]

@NathanMcNulty And if you have budget, @AirlockDigital is even better!

[Sean McGrath @seanmmcg]

I've created a few tools to help with onboarding and maintaining an @AirlockDigital instance, mainly to do with bulk adding rules, and comparing your current rule set to historic executions (to see if you missed anything)
https://t.co/WL85jWBQew

[Daniel Schell @danonit]

@Harvesterify @techspence @AirlockDigital has agents for Linux and Mac. Allowlisting is traditionally difficult on Linux because files aren’t signed, we created a mapping between yum/apt databases to provide publisher trust on Linux. We have drivers for older kernels, and driverless using fanotify api.

[Daniel Schell @danonit]

Brian gets it.

[Daniel Schell @danonit]

Love reading new @AirlockDigital case studies as they are published. EQT is North America's largest natural gas producer. Many more in the pipeline - https://t.co/9Xwa4MApGS

[Koen Van Impe ☕ @cudeso]

The “Allowlist Auditor” from @AirlockDigital is great to highlight the current state of allowlisting on endpoints. Includes tests for execution (exe, dll, PS1, CPL and others) in common locations, and an audit for existing allowlisting solutions. https://t.co/iU3BhPeF90

[Daniel Schell @danonit]

Fantastic to see public recognition of @AirlockDigital as the #1 popular listing in the @CrowdStrike marketplace https://t.co/WSdVbfg35R

[Airlock Digital @AirlockDigital]

We are less than a week away September 18 through September 21, we will be present at CrowdStrike's Fal.Con 2023 as a Gold Sponsor. Join us at Caesars Palace in Las Vegas, to get more details about our allowlisting platform.

[David Cottingham @c0tts]

Blog writeup of what we know https://t.co/thXiNmzwTt

[Airlock Digital @AirlockDigital]

@galeforcestars @riskybusiness We’re and have quite a few. Dm me :)

[Airlock Digital @AirlockDigital]

Come say Hi tomorrow at the Blackhat expo hall tomorrow. Home of the offical @riskybusiness sticker 😂

[Daniel Schell @danonit]

Used our slot on @riskydotbiz news with
@campuscodi to deep dive the vulnerable driver landscape, Microsoft security boundaries, byovd, loldrivers and why/which actors benefit from their use. Interested in community feedback. Listen here: https://t.co/9l64b5uS6h