- Subscription license ( 1 year )
- 1 user
- 1-1000 licenses
Deep Discovery Endpoint Sensor empowers administrators and information security experts with a time shift concept threat lifecycle visibility to triage incident investigation and response. The Deep Discovery Endpoint Sensor agents are managed endpoints that host the Deep Discovery Endpoint Sensor agent program. Installing the agent program on supported endpoints allows you to determine the files, activities, and important system resources on every agent endpoint. Deep Discovery Endpoint Sensor continuously monitors the arrival and execution of suspicious objects. The Deep Discovery Endpoint Sensor agent is enabled by default to provide you with real-time recording of the arrival of vectors commonly associated with targeted attacks - file executions, memory violations, registry changes, and more. Agents send query results to the server in real time. The Deep Discovery Endpoint Sensor agent has built-in smart intelligence based on behavior rules and advanced detection algorithms to filter and catch suspicious events and activities, and then record such activities in the agent database. Consequently, the Deep Discovery Endpoint Sensor server queries agent recordings only during an investigation.