Mimic Networks publishes these case studies so security leaders can see how known-good enforcement works in a real environment before they test it in their own. Each story describes the environment, the problem the security team set out to solve and how Mimic was deployed.
Known-good enforcement takes a different approach from detection. Mimic builds a baseline of each protected system in its authorized state, then checks every attempted change against that baseline at the kernel. A change inside the baseline proceeds. A change outside it is stopped at the point of execution, whichever process makes it. Because Mimic doesn't depend on recognizing the attack, a ransomware variant nobody has seen before is checked the same way as a known one.
The stories start with the systems attackers need most, such as Active Directory domain controllers, file servers, databases and backup servers. Mimic runs on Windows Server 2016 and later, and Red Hat Enterprise Linux 8 and later, alongside the EDR, SIEM and backup tools a team already runs.
Read a story for the setup and the rollout. Then book a demo to see the same approach on your own systems.
