Cyber Triage

What Cyber Triage is

Cyber Triage is an investigation platform for examining cyber incidents and endpoints. It can ingest DFIR collections, EDR telemetry, and disk images; automated collection also supports targeted collection and memory-image imports. Guided analysis applies heuristics, more than 40 malware-scanning engines, YARA rules, and Hayabusa event-log analysis. The workflow scores artifacts and recommends related items and timeline views to help investigators scope an incident. Automated and generative AI results can be reviewed with source references and explanations, and users are notified when generative AI is used. The product is available as a Windows desktop application or self-hosted server depending on plan. Standard Pro costs $3,500 a year for a single investigator and includes 20,000 malware scans per week. A seven-day evaluation provides a fully featured installer for up to two hosts; additional time can be requested. The maker identifies IR teams, SOC analysts, consultants, and law enforcement as users.

Who it suits

Cyber Triage is suited to IR teams, SOC analysts, consultants, and law enforcement investigating incidents or endpoints. Team plans are aimed at multiple investigators needing collaborative investigations and self-hosted deployment.

Limits

The seven-day evaluation is limited to two hosts, although additional time can be requested. Standard Pro is for one investigator and has a malware scanning limit of 20,000 per week; each listed version has the same weekly scan limit.

Getting started

1. Open https://www.cybertriage.com/.
2. Choose the Windows desktop application or a self-hosted plan.
3. Request the seven-day evaluation installer for up to two hosts, or select Standard Pro.
4. Install the evaluation or desktop application; contact sales for Enterprise or Team plans.
5. For technical support, email [email protected].

Verdict

Cyber Triage brings evidence ingestion, guided analysis, and investigation workflow tools together for incident response. The seven-day evaluation is limited to two hosts, and listed paid plan details include a 20,000-scan weekly ceiling.