Spectra Assure Community

Welcome to the Spectra Shower Community on Boarding video.

This video should make less than five minutes of your time,

and I'll walk you through everything you need to get started.

The first, we'll understand the benefits of this community product.

Second, we'll examine the real-world supply chain attack,

and see how Spectra Shower Community product could have helped prevent it.

And third, we'll explore our enterprise offering and the advanced benefits

By the end of this video, you'll understand why Spectra Shower is essential

Senior Director at Reversing Labs, and let's get started.

Let's look at how Spectra Azure Community can help find best building blocks

Open source software attacks can be a major challenge, complicating component

Spectra Azure Community simplifies your workflow with advanced threat detect

analysis and standardized assessments to ensure your open source packages are

Set free, simple risk assessments for NPM, PIPI, RubyGems and many more package

coming soon, then providing visibility into threats, security and compliance

individual developers to entire security teams, Spectra Azure boosts

In our second section, let's analyze the high profile UAParz

Given the potential for widespread damage from supply chain attack, CSAR issued

urging users to operate immediately and review the systems for any malicious

We'll now see how Spectraush or community could have helped detect and prevent

After scanning this version, we found tampering malware and vulnerable dew

It is important to note that this version is now a known compromised package

However, the real power spectra assured lies in detecting that the package was

before it was publicly known as compromised.

Among the issues flagged, one stands out, presence of behaviors exclusively

We see a new behavior specifically downloading the file using certutil.

This Windows utility is typically used by system administrators, not developers

such behavior is a known indicator of malware.

If you are a developer of this package, this analysis would have allowed you to

In our third section, I am going to walk you through our enterprise offering

more the advanced benefits it provides for organizations.

You can scan any file not just OS's components.

You get detailed steps for remediation, plus enterprise features like user

single sign-on, API, CI/CD integration and much more.

For simplicity, I have uploaded similar versions of uapassar.js packages and

We see a failed status for 7.29 version indicating problems.

The assessment categories show threats turning red, highlighting significant

The analysis compares 7.28 with 7.29 and spectra are sure shows version quality

We find indications of tampering and malware in version 7.29.

As noted earlier, this package now has a CVE associated with it, but the power

Azure is to help you detect issues before they become known supply chain

With Spectra Azure Analysis, we check for 9 categories of supply chain attacks

you policy violations and associated files along with easy to fix the

With our enterprise product, you can perform differential analysis for any

As you might recall, amongst the issues that are flagged, the presence of

Investing in it further, we see that file pre-installed.pad in the specified

This file preinstalled like that shows a new behavior related to downloading

As you might recall, this Windows utility is typically used by system

not software developers, and is a known indicator of malware.

This case demonstrates how Spectra Assure can help detect malicious activity,

software integrity before and after a known compromise.

Thank you for watching. Our team at the Worsing Labs would love to hear your