Introducing the Initial Access Broker (IAB) Dashboard

[IAB Dashboard Launch]

The new IAB dashboard helps teams detect pre-attack indicators more efficiently, enabling faster identification of unauthorized network access to you or a partner – before it can be sold and exploited.

Contact sales

We've added a new IAB Intelligence dashboard to our investigation platform, Cerberus, making it easier to shift left and identify actors selling access to infrastructure matching your organization's (or a partner's) description.

Key benefits

• Spot a key attack vector earlier and more easily
• Preemptively get notified if a listing matches your organization's description
• Defend your organization or critical national infrastructure

Since the details in IAB posts are intended to attract buyers, but rarely disclose the name of the target to avoid detection, Searchlight's AI Agent automatically looks for common linguistic signals and patterns in these posts across dark web forums. Using the dashboard, Searchlighters can:

• Filter and set alerts on IAB listings by sector, revenue, and location
• View posts matching your organization's description
• Pivot on posts to verify the actor's credibility and access type for sale (RDP, VPN, stolen credentials)

Searchlight users can view all collated posts within a centralized dashboard, giving defenders quick access to threats operating in the Initial Access (TA0001) tactic in the MITRE ATT&CK framework. Our IAB Mitigation Guide details what you can do if you find a credible post that matches your organization's description.

Early success stories

In the short time since its launch, Searchlight users have successfully identified IAB listings offering access to high-value internal assets, including compromised credentials, SQL databases, and sensitive corporate files. Critically, these findings were made before the access or compromise was publicly disclosed to the impacted victims, such as a global restaurant chain and a national governing body.