Bitdefender XDR Sensor for MDR - Network Government (GOV) 1 license(s) 3 year(s)

eXtended Detection and Response (XDR) is a cross-endpoint event correlation component, capable of detecting advanced attacks across multiple endpoints in hybrid infrastructures (workstations, servers or containers, running various OS). As part of our comprehensive and integrated Environment Protection Platform, XDR brings together device intelligence across your enterprise network. This solution comes in aid of your incident response teams' effort to investigate and respond to advanced threats.

Through Bitdefender Endpoint Security Tools , you can deploy the Incidents Sensor on your managed endpoints, to gather hardware and operating system data. Following a client-server framework, the metadata is collected and processed on both sides, and the Security Analytics component correlates the events into rich format incidents, ready for investigation in the Incidents page.

This component brings detailed information of the detected incidents, an interactive incident map, remediation actions, and integration with Sandbox Analyzer and HyperDetect.

For enhanced accuracy, XDR can integrate metadata collected by the Network Sensor, which listens to the network traffic on your environment, gathering and pre-processing metadata and sending it to the Security Analytics component to correlate it and generate extended incidents.

 

• Detect cyberattacks across systems, productivity applications, cloud workloads, identity, and networks
• Provides a root cause analysis for security teams to review
• Visualize the complete attack chain in an easy to digest format to identify weak points in the security chain
• Quickly take response actions – delete malicious emails, isolate hosts, disable user accounts, and more
• Thwart attacks before they happen with award-winning prevention capabilities