PRODUCTS / LUCAS UEBA PLATFORM
Autonomous Sec Ops

LUCAS UEBA Platform

AI Trust Inference Engine that unifies identity, behaviour, and threat detection into a single autonomous SecOps platform.

INFRASTRUCTURE
TO INTELLIGENCE
<5min
Mean Detection Time
90%
False Positive Reduction
24/7
Autonomous Monitoring
XDR
Native Integration
CORE CAPABILITIES

What it does.

AI Trust Inference Engine

Continuous behavioural baseline per user and entity. Anomaly scoring that adapts to your organisation.

UEBA + Identity Fusion

Behaviour analytics fused with identity data, catch insider threats, compromised accounts, and privilege abuse.

uberAgent + UniXecure

Deep endpoint telemetry combined with rapid threat response, full kill chain visibility.

Managed NOC / SOC

SYSTEX Asia analysts as your Tier 2/3 escalation. 24/7 human oversight on top of AI detection.

XDR / MSSP Integration

Pre-built connectors to SIEM, EDR, NDR, and cloud security platforms, one unified incident view.

Continuous Threat Exposure

CTEM framework: continuous discovery, prioritisation, and validation of your attack surface.

HOW IT WORKS

The journey to value.

01

Deploy Sensors

Agents deployed across endpoints, servers, and cloud workloads.

02

Baseline

AI engine establishes normal behaviour baselines over 2-4 weeks.

03

Detect

Autonomous detection and scoring of anomalies, threats, and violations.

04

Respond

Automated playbooks + human-in-the-loop escalation for confirmed incidents.

CUSTOMER STORIES

Proven across Asia.

BANKING

Insider Threat Detection

A regional bank detected a privileged user exfiltrating customer data, the anomalous access pattern was flagged and the session terminated automatically.

Breach contained within 4 minutes of first anomaly

GOVERNMENT

Zero Day Response

LUCAS detected lateral movement from an advanced actor using a zero-day exploit within 8 minutes, before any IOC signatures existed.

Full incident contained in under 30 minutes

HEALTHCARE

Ransomware Prevention

Pre-detonation ransomware activity (mass file enumeration) was detected and isolated at a hospital. No files were encrypted.

Zero data loss · Zero ransom paid

RETAIL

Supply Chain Compromise

Third-party vendor credentials were used to access POS systems. LUCAS flagged a geo-impossible login and off-hours access instantly.

Attack stopped before any POS compromise

technology partners
Transforming technology landscapes across Asia through innovative solutions and strategic partnerships
TECHNICAL SPECIFICATIONS

Built for enterprise scale.

Detection

Mean Time to Detect
< 5 min automated · < 30 min escalation
False Positive Rate
< 2% after 30-day baseline
Coverage
Endpoint · Network · Cloud · Identity
Frameworks
MITRE ATT&CK · NIST · CIS Controls

Operations

SOC Model
Managed · Co-managed · Platform-only
Retention
90 days hot · 1 year cold storage
Compliance
MAS TRM · PDPA · ISO 27001 · SOC 2
Integration
REST API · SIEM connectors · SOAR playbooks

Find the right platform for your environment.

Talk to a SYSTEX Asia specialist and map the portfolio to your priorities.