With the latest version of this solution, users can now take advantage of an essential endpoint detection and response tool with in-built users who can access an advanced automated detection mechanism and tailored incident response recommendations. The updated Kaspersky Endpoint Detection and Response Optimum also ensures protection from damage to crucial OS files and provides information on file reputation from Kaspersky’s Threat Intelligence portal.
While companies are struggling to ensure the protection of their ever-complex IT infrastructures, adversaries won’t hesitate to capitalize on organizations’ cybersecurity gaps. According to the recent Managed Detection and Response analytics report from Kaspersky, the proportion of high severity cybersecurity incidents facing organizations has increased by 50% in the last year.
To help IT security workers deal with increased attack surface and complexity, Kaspersky presents the new edition of Endpoint Detection and Response Optimum. The updated version also gives users the opportunity to gain highly sought-after skills in incident investigation and response, and helps them handle their responsibilities under conditions of limited time and attention.
Kaspersky Endpoint Detection and Response Optimum provides information to get up to speed really quickly. Apart from previously available YouTube video instructions, the product now offers a Guided Response section in the alert card where IT security specialists can access all the recommended steps for investigation and response.
In addition, Kaspersky Endpoint Detection and Response Optimum contains integrated ‘quality of life improvements, such as Threat Intelligence file reputation in the alert card. Also, when a response is performed a special check will help avoid making a mistake and blocking a crucial OS file, which can lead to ruining the whole infrastructure.
File reputation from Kaspersky Threat Intelligence Portal is available directly in the console, allowing users to understand what files are good, malicious, or suspicious, and also see known or new threats in even faster and easier ways. It also shows information in which regions or countries the file was observed most frequently, and provides a link to the threat intelligence portal with additional information about the file.
