Software
software:threatlocker
Also: Threatlocker
Endpoint security software that blocks applications by default, supports allow-listing, and provides logs and policy controls.
Endpoint security software that blocks applications by default, supports allow-listing, and provides logs and policy controls.
“It stopped everything from running if you didn’t allow it to run.”
“it’s been blocked by ThreatLocker”
“there’s a service, there’s a driver, there’s a portal, and there’s an API”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DEVELOPED_BY | Danny Jenkins | Explicit | 167 |
| outgoing | USES | application control | Explicit | 167 |
| outgoing | USES | application allow-listing | Explicit | 167 |
| outgoing | USES | deny by default | Explicit | 167 |
| outgoing | ASSOCIATED_WITH | zero-trust | Explicit | 167 |
| incoming | INVOLVES | ThreatLocker hospital ransomware incident | Explicit | 167 |
| incoming | USES | Ark Technology Consultants | Explicit | 167 |
ThreatLocker hospital ransomware incident INVOLVES ThreatLocker
Ark’s team installed ThreatLocker on the hospital’s servers and computers, and ThreatLocker later blocked tools the threat actor attempted to use.
Explicit Confidence 98% · Jack Rhysider EP 167 Details
“we brought in ThreatLocker, installed it on all the servers and computers”
“ThreatLocker had blocked the solutions that the threat actor had planned on leveraging”
Ark Technology Consultants USES ThreatLocker
Hunter says he and his team at Ark brought ThreatLocker into the hospital environment they were securing.
Explicit Confidence 90% · Jack Rhysider EP 167 Details
“we brought in ThreatLocker, installed it on all the servers and computers”
ThreatLocker DEVELOPED_BY Danny Jenkins
Danny says he is ThreatLocker’s CEO and co-founder and that he coded its first version.
Explicit Confidence 99% · Danny Jenkins EP 167 Details
“I’m Danny Jenkins. I’m CEO and co-founder of ThreatLocker”
“I coded the first of it. So, I coded the first version”
ThreatLocker USES application control
ThreatLocker is presented as providing application control by preventing unapproved applications from running.
Explicit Confidence 98% · Jack Rhysider EP 167 Details
“what ThreatLocker does is it says, okay, let’s start by blocking every app from opening and running”
ThreatLocker USES application allow-listing
ThreatLocker uses application allow-listing: applications are learned and added to an allow list before secure mode is enabled.
Explicit Confidence 98% · Jack Rhysider EP 167 Details
“you add those apps to the allow list”
ThreatLocker USES deny by default
ThreatLocker is described as blocking everything by default unless the application is permitted.
Explicit Confidence 98% · Danny Jenkins EP 167 Details
“I want to change the way the world thinks about security from default allow to default deny”
“we’re gonna block everything”
ThreatLocker ASSOCIATED_WITH zero-trust
Danny presents ThreatLocker’s deny-by-default and access-granting model as a way to implement zero-trust principles.
Explicit Confidence 96% · Danny Jenkins EP 167 Details
“we can deploy application control. We can block software by default”
“We want to change the market so that ninety percent of the world are using a zero-trust approach”