“We believe the new features will allow our customers not only to ensure the protection of their company against multiple types of threats, but also increase the EDR expertise of the internal IT security team.”ĭuring the last year, Kaspersky Endpoint Detection and Response was repeatedly recognized for its outstanding protective capacity. “When our team was working on the Kaspersky Endpoint Detection and Response Optimum enhancements, one of the goals was to make all the solutions’ capabilities accessible for all types of our users, even for those who are making their first steps in investigation and response, ” said Pavel Petrov, senior product manager at Kaspersky. It also shows information in which regions or countries the file was observed most frequently, and provides a link to the threat intelligence portal with additional information about the file. When a response is performed, SCO check will help to avoid making a mistake and blocking a crucial OS file, which can lead to ruining the whole infrastructure.įile reputation from Kaspersky Threat Intelligence Portal is available directly in the console, allowing users to understand what files are good, malicious or suspicious, and also see known or new threats in even faster and easier ways. In addition, Kaspersky Endpoint Detection and Response Optimum contains integrated ‘quality of life’ improvements, such as System Critical Objects (SCO) check and Threat Intelligence file reputation in the alert card. When allowed, a sandbox detection will work in the background and send suspicious files for analysis in the cloud if they haven’t been analyzed before. In the latest update, the solution also provides a cloud sandbox detection mechanism which detects suspicious files without requiring any additional input from an IT security worker. Each recommendation was prepared by Kaspersky Threat Research and RnD teams that have more than 25 years of experience in the field. In addition to the previously available YouTube video instructions, the product now offers a whole Guided Response section in the alert card where an IT security specialist can see the recommended steps for investigation and response. Kaspersky Endpoint Detection and Response Optimum provides information to get up to speed really quickly.

Kaspersky edr