Antivirus solutions have traditionally relied very heavily on something called ‘signature matching’ to determine threats to the device. AV software compares files against a known database of “bad” files.

Secure IT™ EDR includes monitoring and detection of threats, including those that may not be easily recognized or defined by standard antivirus. Secure IT™ EDR is behavior-based, so it can detect unknown threats based on a behavior that isn’t normal.

ActiveEDR intelligently automates EDR by providing Storyline context (shown in MITRE ATT&CK Phase 2 testing) and a full range of automated and manual remediation actions. Devices defend themselves autonomously by terminating and quarantining unauthorized processes and files in real-time. Devices also heal themselves with surgical, automated remediation and rollback to help reduce Mean Time to Remediate (MTTR). Threat hunters and incident responders can also use these functions to mark identified suspicious situations as threats for automatic, estate-wide remediation which greatly increases responder efficiency.

Any kind! Administrators can create highly granular control for any type of USB device as defined by the USB standard. Policy can be defined by vendor ID, product ID, serial number or by class of device which includes things like audio, printers, mass storage, smart cards, video devices, USB-C devices, personal healthcare devices, and more.

Our solution offers native OS firewall control for Windows, Mac, and Linux. Your security policies may require different local OS firewall policies applied based on the device’s location. For example… perhaps a more restrictive policy is used outside the organization’s network vs. a more open policy inside the network. Administrators craft network location tests that help the endpoint automatically determine what network it’s connected to then applies the correct firewall policy accordingly.