The SEUtility is designed to streamline and assist the sales process by simplifying the Idira PAM-SH Privileged Threat Analytics (PTA) demonstration.

It enables sales engineers (SEs) to quickly generate artificial security events and risks using pre-defined profiles and demo data, allowing them to showcase PTA’s capabilities to customers and prospects with a single click.

At the heart of the SEUtility is the Profile Creator, which bypasses the typical PTA training phase required to establish baseline behavior.

Instead, it injects pre-determined behavioral profiles, saving valuable time during Proof of Concept (POC) sessions and giving SEs greater control over the flow and how the demonstration evolves.

How It Works:

The SEUtility generates profiles for several profile-based PTA detection algorithms; any deviations from these created profiles are detected as anomalies, allowing for an immediate and impactful demonstration of PTA’s detection capabilities.

Additionally, users can delete previous data and create a clean environment or leave the environment with existing data; in this case, a correlation between incidents may occur.

How to Use It

1. Copy the SEUtility tool to the PTA server.

2. Set the appropriate execute permissions on the SEUtility run.sh file.

3. Run the utility using the command: ./run.sh

4. Provide the necessary input values as prompted. Note: The Vault username should correspond to a user authorized to log into the Vault.