Triumfant Inc. turned heads when it introduced its advanced malware analysis platform in 2008. This year the company introduced a monitored service offering for anomaly detection. Once it detects a threat, it provides a blueprint of the affected files, registry keys, processes and services that are impacted. The platform uses a company's security policies to detect unauthorized applications and can also scan and monitor endpoint systems for unusual states that signal a threat condition. The company claims its detection engine is built with analytics that can hundreds of thousands of state attributes to find anomalous behavior.