Contexa threat intelligence database by VMware launches

SDxCentral reports that VMware has introduced Contexa, its new threat intelligence database that detects abnormalities and suspicious behaviors by analyzing telemetry from the hybrid cloud, network and various systems. Tom Gillis, VMware's senior vice president and general manager of networking and advanced security business group, said the new offering is an "amalgamation of the four different security threat telemetry databases that we have at VMware, from the endpoint to the application." Contexa develops a common threat database using telemetry at the endpoint, cloud edge, access point, between containers, clouds and virtual machine gathered using VMware's secure access service edge, service mesh, endpoint detection and response, virtual machine and hybrid cloud platforms, Gillis said. It is claimed to be capable of recording and processing over 10 billion network flows and 1.5 trillion endpoint events per day, in addition to data captured from separate technology partners. VMware analyzes this data using machine learning, incident response partners and more than 500 researchers that make up its threat analysis unit.