Kaspersky Endpoint Detection and Response Expert

Kaspersky EDR Expert is based on Kaspersky Endpoint Security for Business. Our most tested, most awarded EPP solution provides a firm foundation, automatically handling the vast majority of alerts, freeing up analysts to focus on tasks that really require their attention and expertise.

Complex threats and extended attacks using unknown malicious code, compromised accounts, fileless methods, legitimate applications and unsuspected actions all require a multi-level approach to detection with advanced technologies.

• IoC-based discovery
• IoA analysis empowered by MITRE ATT&CK mapping
• Automated threat intelligence — Kaspersky (Private) Security Network
• YARA rules (customizable by your IT security team)
• Sandbox analysis of suspicious objects
• Cloud ML for APK file analysis
• Digital certificate verification
• External threat intelligence
cooperation

Kaspersky EDR Expert continuously collects telemetry and sends it to centralized cloud or on-prem storage, so that during incident investigation, retrospective data can be quickly accessed – particularly important when the compromised endpoints are inaccessible or their data has been encrypted by cybercriminals. The solution enables your IT security team to conduct detailed incident investigations, with access to the Kaspersky Threat Intelligence Portal, and enriched detections automatically matched to the MITRE ATT&CK knowledge base. They can also create complex queries to search for atypical and suspicious behavior, for specific techniques in MITRE ATT&CK, and for other signs of malicious activity, based on the specifics of your individual infrastructure. Hunt for threats before they can cause a problem!

Fast, accurate threat containment and incident resolution across distributed infrastructures is supported through centralized and automated actions, helping to streamline the work of your IT security team. No more costly additional resources needed, no more expensive downtime and no lost productivity. Depending on the situation, there is always a choice between automatic and guided responses.