MetaDefender Core Customer Snapshot

NRI Secure Technologies

NRI Secure Technologies, Ltd. address their client's information security needs from both a technology and management standpoint, offering highly secure operations, monitoring, consulting, solutions implementation and other services as a one-stop provider.

Customer Challenges

NRI specializes in Incident Response and Malware Analysis Services. NRI collects malware samples from clients and uses various tools to analyze the sample, determining whether the sample is malicious and whether common antivirus engines can detect it. Many malware samples include confidential customer information that is not permissible to upload to an external web service such as VirusTotal, so NRI faced a challenge in only being able to use such services for retrieving existing scan results using the malware sample’s hash value. Using this method, many files could not be correctly analyzed for maliciousness; NRI needed a solution that would allow them to scan all client files while keeping them secure in their own environment.

OPSWAT’s Solution

NRI Technologies chose OPSWAT’s Metascan® (now MetaDefender) and Metascan Client (now MetaDefender Client) technologies for their confidential file scanning needs. Malware samples that NRI collects can be scanned by Metascan using anywhere from 1-30 unique antivirus engines in parallel. Metascan Client is an executable that communicates with a Metascan server to scan remote endpoints within a network, and is a great additional tool for the Incident Response side of NRI’s business. NRI also has a proprietary heuristic scan engine that they use to identify potential threats; with the ability to easily pass files to Metascan, NRI can check the results from many antivirus engines to help provide more insight into files that are flagged by this heuristic engine.

Metascan has enabled us not only to improve our incident response quality but also to ensure safety of customer information by allowing us to scan files with a private, on-premises solution.

Koji Tashima
IT Security Analyst, NRI

Results

Metascan Client allows NRI to scan many files with several engines within one scan session, providing accurate information and shortening the time of response. By scanning with multiple engines, NRI has secured not only a higher detection rate for known threats but has also grasped a comprehensive view of how the antivirus community has reacted to new or existing malware. With the added benefit of keeping everything in house, Metascan and Metascan Client make the ideal Incident response tools.

For more information about Metascan or Metascan Client please visit MetaDefender and MetaDefender Client.

To learn about integrating the multi-scanning technology within your security infrastructure, please contact us.