What is DRONE?

Lightning Fast, 24/7 Assisted Compromise Assessment Tool
DRONE is an automated compromise assessment solution for quickly investigating an endpoint. It contains IREC engine capabilities so with DRONE you can collect more than 150+ types of digital evidence and start analyzing the collected evidence with internal out-of-the-box analyzers.
DRONE highly increases the investigation time by providing automated findings to the analysts. In this way, analysts are not spending time on what is different, strange, or unexpected in a case since they are automatically provided with all the findings. It works by tagging findings using 2 different scan categories:
  1. 1.
    Score - (low, medium, high - these scores are created by the analysis pipelines)
  2. 2.
    Verdict (dangerous, matched, suspicious, relevant, rare)