Symantec Endpoint Detection and Response - Initial Hybrid Subscription (3 y

Expose stealthy attacks with cloud-delivered analytics, advanced AI, and anomaly detection. Detect and expose suspicious activity, and prioritize incidents, using machine learning and behavioral analytics. Identify endpoints that have unusual software, build discrepancies, and unpatched systems. Detect persistent threats with forensic analysis of in-memory processes, files, and OS objects. Collect data directly from endpoints via real-time queries.

Investigate and contain suspicious events using advanced sandboxing, blacklisting, and quarantining. Gain visibility into attack history by continuously recording activity, and retrieving endpoint process dumps. Seal off potentially compromised endpoints during investigation with endpoint isolation. Delete malicious files and associated artifacts on all impacted endpoints. Use prebuilt apps for popular SIEM, security orchestration, and ticketing solutions.