A smart alarm on each computer and server. It watches for bad behavior and stops an attack in progress. XDR extends that view across more of your systems.
A lightweight agent watches processes and memory on each computer. It can block malicious behavior as it happens, including blocking outbound communications and undoing changes. XDR correlates data from more sources.
On managed computers, administrators want to see exactly what ran and what it did, including on shared or inmate-use machines where permitted.
- Records what ran on a computer, and when.
- Stops malicious activity automatically.
- Provides detail for investigations.
When a county was hit, the jail felt it
In January 2022, ransomware aimed at Bernalillo County, New Mexico, took down most data systems at its Metropolitan Detention Center, cut camera access and briefly disabled automatic doors. Inmates were confined to cells and visits were suspended.
Source: Malwarebytes
- Behavior-based prevention before and after infection.
- Communication control stops malware from connecting out.
- Forensics show the complete attack chain.
- Automated rollback helps restore changed systems.
| Control | Priority | How this helps |
|---|---|---|
| SI-3Malicious Code Protection | P1 | Protects endpoints against malicious code. |
| SI-4System Monitoring | P1 | Monitors endpoints. |
| IR-4Incident Handling | P2* | Supports containment and investigation. |
| IR-5Incident Monitoring | P2* | Tracks incidents. |
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table