Organisation
organisation:kroll
Consulting firm engaged to investigate the retail company’s network for malware.
Consulting firm engaged to investigate the retail company’s network for malware.
“they called a consulting firm called Kroll.”
Investigative agency whose representatives visited Matthew Earl on behalf of Wirecard.
“two men from an investigative agency called Kroll showed up at his door.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Carbon Black | Explicit | 15 |
| outgoing | ASSOCIATED_WITH | Wirecard AG | Explicit | 79 |
| incoming | INVOLVES | Retail credit-card breach | Explicit | 15 |
| incoming | MEMBER_OF | Courtney Dayter | Explicit | 15 |
| incoming | MEMBER_OF | Matt Bromiley | Explicit | 15 |
Retail credit-card breach INVOLVES Kroll
The retail company hired Kroll to investigate possible malware in its network.
Explicit Confidence 99% · Jack Rhysider EP 15 Details
“this store wanted to investigate anyways so they called a consulting firm called Kroll”
Courtney Dayter MEMBER_OF Kroll
Courtney was one of the Kroll incident-response team members working on the case.
Explicit Confidence 95% · Jack Rhysider EP 15 Details
“Let’s meet two of the members of that team.”
“My name’s Courtney Dayter. I’m a Senior Managing Consultant.”
Matt Bromiley MEMBER_OF Kroll
Matt was part of the Kroll incident-response team during the investigation.
Explicit Confidence 95% · Jack Rhysider EP 15 Details
“Let’s meet two of the members of that team.”
“My name is Matt Bromiley.”
Kroll USES Carbon Black
Kroll’s incident-response team primarily used Carbon Black for endpoint monitoring and analysis across the environment.
Explicit Confidence 99% · Matt Bromiley EP 15 Details
“The tool that we use primarily is Carbon Black which is an end-point monitoring tool”
Kroll ASSOCIATED_WITH Wirecard AG
Kroll investigators visited Matthew Earl on behalf of Wirecard regarding his research into the company.
Explicit Confidence 98% · Jack Rhysider EP 79 Details
“The two men let him know that they were there on behalf of Wirecard”