Rapid Threat Scan
Security teams needed a fast way to find compromised files across billions of records.
The Challenge
The Problem
Security Operations Center (SOC) teams face extreme time pressure during active cyber threats.
The Friction
Traditional malware scanning across enterprise backup data is historically slow.
User Context
An incident responder receiving a late-night federal alert needs instant answers.
The Goal
A High-Stakes Incident Response that instantly identify Indicators of Compromise (IoCs) to limit threat propagation.
The Solution
The Feature
Hash-Based Search Interface. Engineered a rapid threat hunting search tool utilizing SHA-256 file hashes.
Performance
Designed the system to query billions of files in under a minute.
Mechanism
Files are automatically hashed on ingest and indexed into a searchable data table.
Product Impact & UX Metrics
Blast Radius Mapping
Streamlined how responders locate every system containing an infected file.
Time to Detect (TTD)
Reduced a complex threat investigation into a single, near-instant search operation.
Historical Audit
Enabled users to scan current environments and trace historical presence over months.
Project overview
Role
UX Designer
Timeline
3 months
Team
Collaborated with engineering and project management teams
Responsibilities
Analysis, mockups, and customer feedback