Endpoint Analytics is a nextgen endpoint + cloud solution that automates the rapid identification of advanced threats on Windows and Apple iOS endpoints. EA collects fully deconstructed process stacks and uploads them to our cloud analytics system where known threats are automatically identified in near-real time, and analysts can perform additional automated or advanced analysis to identify threats for which no known signatures exist. EA is built in Amazon’s cloud, which allows for rapid integration with nearly all security and desktop solutions, including VirusTotal, Splunk, ServiceNow and others.
OUR PROCESS
Step 1
Deploy the temporary lightweight collector to endpoints.
Step 2
Collect active processes, networking, system, and other information.
Step 3
Send the encrypted data to our cloud-based analytics system
Step 4
Automated and manual analysis with our cloud-based analytics interface.