BlackVault family
Eagle Eye
Endpoint security for the BlackVault family.
In development
Eagle Eye is the BlackVault family’s endpoint security agent, a Citadel product. It watches Windows PCs and the NAS for the marks attackers leave and e-mails an alert. In development, installed nowhere yet.
Features
What it does, in its own words
Antivirus turned down
Notices when antivirus protection is turned down or exclusions are added.
New startup items and scheduled tasks
Notices new startup items and new scheduled tasks.
Installers run from a web address
Notices installers that are run straight from a web address.
Programs in unusual folders
Notices programs running from unusual folders.
Cleared logs
Notices when logs are cleared.
Unusual uploads
Notices unusual uploads.
Bait files on the NAS
Notices when bait files on the NAS are touched.
Product details
Availability
- In development. The first version is built and internally reviewed, and is not yet released.
- Alert-only: it tells you, and does not block or repair anything yet.
Platforms
- Windows PCs and the NAS (first version, not yet released)
Coming next Roadmap
None of this is available today.
- Machine health and posture checks: OS support, disk encryption, Secure Boot and TPM, BIOS and microcode, hardware errors, NAS temperature.
- One-tap approved repair playbooks.
- macOS.
- Prevention through the built-in enforcement of Windows and macOS.
- Isolating an infected machine.
Security and privacy
- Alert-only today: it does not block anything yet.
- Eagle Eye is a Citadel product.
Support
No product support page is published yet. See support.
Product wording on this page comes from eagleeye.theblackvaultgroup.com.