Overview
DTEX i³ insider threat intelligence services are subscription models for insider investigations, analyst-led risk prioritization, managed threat hunts, customer-directed hunts, RFIs, RFAs, and custom use case development.
Enhanced is the structured option: monthly syncs, weekly User Risk Prioritization, quarterly Risk Model Review, monthly managed threat hunts, 24 training hours, up to 3 analyst certifications, and 6 each of customer-directed hunts, RFIs, RFAs, and investigations. Elite raises the cadence to biweekly syncs, daily prioritization, biweekly managed threat hunts, 48 training hours, up to 5 certifications, and 12 each of those services.
Dedicated assigns the full capacity of a DTEX i³ Insider Risk Analyst to one customer for the contract term, with investigation and TTP support, mentorship, program guidance, and local onsite staffing if required.
What You'll Learn
- How Enhanced, Elite, and Dedicated differ by analyst access, cadence, training hours, and investigation volume.
- What DTEX provides for User Risk Prioritization, Risk Model Review, managed hunts, and adversary profiles.
- What customer input is needed for customer-directed hunts, custom use cases, RFIs, RFAs, and investigations.
- How outputs are delivered through platform markings, configuration changes, and support portal publications.
Frequently Asked Questions
What is included in DTEX i³ insider threat intelligence services?
DTEX i³ includes insider investigations, analyst-led risk prioritization, managed threat hunts, customer-directed hunts, RFIs, RFAs, and custom use case development. Enhanced and Elite add assigned analyst syncs, adversary profiles, training, risk model reviews, and set investigation counts.
How do Enhanced, Elite, and Dedicated insider threat intelligence services differ?
They differ by analyst access, cadence, training hours, and investigation volume. Enhanced uses a monthly and weekly cadence with 24 training hours and 6 each of the defined services. Elite moves to biweekly and daily cadences with 48 training hours and 12 each of those services.
What does the Dedicated DTEX i³ subscription provide for insider threat investigations?
Dedicated provides the full capacity of a DTEX i³ Insider Risk Analyst for one customer during the contract term. The analyst supports insider threat investigations and TTPs, mentorship, guided program development, and local onsite staffing if required.
How should a security team choose between Enhanced, Elite, and Dedicated insider threat intelligence services?
Choose based on the analyst access, prioritization cadence, training, managed threat hunting frequency, and investigation capacity required. Enhanced is structured, Elite increases frequency and volume, and Dedicated assigns full analyst capacity to the customer IRM program.
What insider threat detection and investigation activities are supported by DTEX i³?
DTEX i³ supports User Risk Prioritization, Risk Model Review, managed threat hunts, customer-directed hunts, RFIs, RFAs, and custom use case development for customer-specific insider risk requirements.
Ready to Learn More?
See how the DTEX Platform helps teams detect and mitigate insider risk. Request a demo.