Solutions

Hardware and software, assembled for the mission.

Each solution pairs Rhombus hardware with the software a mission needs, deployed and managed from one console. Here is what goes into each one and how the pieces connect.

Hunt forward and incident response

Available

Carry the kit in, take a passive copy of traffic from a SPAN port or TAP, and hunt from a browser. Nothing touches the production data path and nothing leaves the site.

Hardware: Rhombus Edge
Software: Rhombus Core · Network security monitoring · SIEM & analytics · Threat intelligence · Digital forensics & IR

Your network

SPAN port or network TAP
Suspect hosts: disk images and artifacts

Rhombus Edge

Sensors: packet capture, protocol logs, IDS
SIEM and analytics
Threat intelligence
Forensic workstation

Your team

Analysts in the browser
Single sign-on, role-based access

Malware analysis lab

Available

Files carved from traffic and files your analysts upload go to automated triage on an isolated segment. Suspicious files go to a reverse-engineering workstation, and new indicators flow back to the sensors.

Hardware: Rhombus Edge
Software: Rhombus Core · Rhombus Analyze · Threat intelligence · Network security monitoring

Samples

Files carved by the sensors
Analyst uploads and USB media

Isolated malware segment

Automated triage: YARA, config extraction
Linux and Windows RE workstations
Threat intelligence

Outcomes

Verdicts for analysts
New indicators pushed to the sensors

Training and exercise range

Available

An instructor deploys a range from the console, runs a red cell against it, and students hunt the results on the same sensors they use in the field. The range resets between classes.

Hardware: Rhombus Edge
Software: Rhombus Core · Training range & CTF · Offensive validation · Cyber deception · Network security monitoring

Parts of this solution do not yet deploy on current-generation kits.

Red cell

Attack workstation
Automated adversary emulation

Range on Rhombus Edge

Vulnerable targets and Active Directory range
Decoys and breadcrumbs
Sensors and SIEM
Scored challenges

Classroom

Students hunt and score
Instructor resets between classes

Multi-kit operations

Available

Rhombus Station manages every enrolled kit from one console. See link status and health for each site, and deploy, redeploy or tear down mission packages on one kit or many. Every kit keeps its own console, and sites catch up on what they missed when a link drops.

Hardware: Two or more Rhombus Edge kits
Software: Rhombus Core on every kit · Rhombus Station

Your deployments