Falcon Insight — Endpoint Detection and Response (EDR)

Technical Features

 

  • Full-spectrum visibility in real time
  • Continuous raw event recording provides unparalleled visibility, powering machine learning models for detection of emerging threats
  • Augment best of breed AI/MLand IOA detections with high-performance memory scanning to detect the stealthiest APTs
  • Enable threat hunting– proactive and managed – with full endpoint activity details
  • Unravels entire attack in the easy-to-use Incident Workbench enriched with context and threat intelligence data
  • Understand endpoint security postureand take recommended actions to reduce risk.
  • Intelligent EDRwith AI-powered indicators of attack (IOAs) automatically detects and intelligently prioritizes malicious and attacker activity
  • Powerful response actions allow you to contain and investigate compromised systems, including on-the-fly remote access to take immediate action
  • Streamlined notificationsand response workflows enable security teams to use alerts, detections and incidents as triggers and build repeatable and consistent automation
  • Quick search returns threat hunting and investigation query results in five seconds or less
  • Mapping alerts to the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK™) framework helps you understand even the most complex detections at a glance

 

  • The power of the cloud
  • Reduce cost and complexity when you eliminate constant signature updates, on-premises infrastructure or complex integrations
  • Works on Day One – deploys and is operational in minutes with broad platform support – including Windows, Windows Server, macOSand Linux across an organization’s entire estate of endpoints