How J&B Technologies Found a Live Compromise Missed by a Competing ITDR

J&B Technologies is a 30-year-old St. Louis MSP, recognized locally for fast, reliable IT and cybersecurity service to small and mid-sized businesses across the region. To get best-in-class M365 identity protection through a trusted local MSP, visit jbtech.com.

Before Petra

J&B walked into Right of Boom not planning to buy anything.

When John Kistler, Owner & CEO of J&B Technologies, met the Petra team at Right of Boom, he had already made up his mind.

"I told myself, 'I'm not buying any more security products,'" John says. "And my tech manager reiterated to me before I went that 'we don't need any more tech tools, don't buy anything.'"

But two things stuck when he met the Petra team. First, J&B was already seeing the pattern that drives every BEC investigation: clients clicking on emails and then telling J&B they hadn't. Second, speed is everything.

"I filed that away and thought about it, all the while wondering if my other security products were just as fast, or if that was just hyperbole."

A few weeks later, while John was at the CyberFox show in Orlando, one of J&B's clients was compromised. He signed up for a Petra trial that week.

Baseline Scan

Day-one baseline scan surfaced a hidden compromise immediately.

John signed up for a trial across 10 client tenant's and J&B's own. Petra's baseline Scan looks back through the audit logs that are already in Microsoft 365 and reconstructs prior compromises the existing stack missed.

"You all were kind enough to put the training wheels on 10 of our client accounts (and ours) and let it show us what was going on, and BAM," said John.

Petra quickly surfaced an ongoing compromise that had not been caught by the existing tools. The intruder had registered a third-party email client to exfiltrate the entire mailbox, accessed thousands of emails with financial information, sent malicious invoice replies from the user's account, and added inbox rules to hide the activity from the real user.

"One of our clients was going through a BEC right then, and just the speed and the accuracy of the information was incredible and then the Scan report was more incredible and I was blown away. I emailed my client and said, 'You are buying this, and they caught this, and you're welcome.'"

The Outcome

Petra is now J&B's answer to BEC.

Across J&B's clients, Petra has continued to find and contain attacks the other tools missed, including AiTM logins, latent compromises with attacker-added inbox rules, and active sessions where the attacker had retained the password from before. For each one, J&B gets a forensic Scan report they can hand directly to the client.

John's takeaway: Petra is faster than the three other ITDR products he's seen in market.

"I want to sleep better at night, I want to protect my clients, and I want them to sleep better at night too."

—

J&B Technologies is a 30-year-old St. Louis MSP, recognized locally for fast, reliable IT and cybersecurity service to small and mid-sized businesses across the region. To get best-in-class M365 identity protection through a trusted local MSP, visit jbtech.com.