A cornerstone of the Cognito™ cyberattack-detection and threat-hunting platform, Cognito Recall™ from Vectra® provides the most efficient way to perform AI-assisted threat hunting in cloud and data center workloads and user and IoT devices.

A comprehensive source of enriched network metadata, Cognito Recall also empowers skilled security analysts and professional threat hunters to conduct conclusive incident investigations.

The metadata in Cognito Recall is organized by host name, not just IP address. This eliminates the need to search through DHCP logs to find the host device that was using an IP address at the time and to piece together IP address changes during an investigation. Searching by device saves time when speed is essential.

Cognito Recall enables incident responders to follow the chain of events from an initial threat signal – whether from Cognito Detect™, another security event or threat intelligence – using enriched network metadata that is searchable by host name.

Cognito Recall is like a transactional record of every conversation across the enterprise. But the collection and storage of historical metadata, instead of packet payloads, ensures data privacy and supports compliance mandates like GDPR.

And since Cognito Recall is delivered as a service in the cloud, there’s no big data infrastructure to purchase, install and manage. Just a single click to forward metadata to the Vectra cloud.