EDR

Product Introduction

Visual Management of Endpoint Threat: Through the analysis of abnormal behavior data of endpoint, combined with the comprehensive analysis of context data and the data pushed by threat intelligence, the malicious activities of advanced threats can be clearly visible and implement the tracking of advanced threats.

Fast Response of Advanced Threat: Through the intelligent response capability of endpoint to the advanced threats, to implement the prevention of attack, endpoint isolation and repair, and threat tracing, transform single positive response into continuous static rule to continuously contain advanced threats and improve the capability of the endpoint security management platform to respond to advanced threats.

Comprehensive Investigation Mechanism: More threat information can be searched and drilled in the network to analyze the real purpose of penetration, so that security person can quickly determine the scope and impact, timely stop losses, and improve the efficiency of emergency response.

Collection and storage of endpoint security behavior data

Continuously collect security-related data of the whole network endpoints, and summarize the collected endpoint security data in real time to the big data analysis platform for unified storage and management.
Detection and alarm of advanced threat

Support quickly search the endpoint behaviors of the whole network, accurately locate and generate alarms for advanced threat events by combining QAX big data threat intelligence, threat hunting and other methods.
Investigation and analysis of threat event

Provides the endpoint security big data search capability, which can drill and analyze threat events in depth, recover the timeline of threat events, trace their source, and analyze the scope of influence, loss and other related information.
Fast response to threat

After determining the impact range, you can quickly respond to threat events and isolate local risky endpoint.

Advanced threat hunting

The advanced threat hunting technology based on artificial intelligence behavior engine as the core covers the multi-platform terminal system, providing high precision and multi-dimensional advanced threat hunting capability.
Big data analysis and retrieval

Through the self-developed big data analysis and retrieval engine, it can efficiently process and quickly analyze the massive data collected by the endpoint, implement real-time retrieval and analysis of behavioral data, and help enterprise users to centrally manage endpoint data.
Powerful investigation and analysis platform

Provide the capability to track, analyze and investigate threats, dig deeply based on threat events and relevant endpoint context information, so as to discover the network kill chain and restore the truth of events.
Real-time fusion of threat intelligence

Receive the threat intelligence of QAX cloud in real time, and convert the information into relevant indicators to correlate with the behavior data of endpoints in the whole network, and quickly locate the infected endpoints.
Rich means of response and disposal

Provides fast response to advanced threat events and integrates the endpoint security management system to contain and repair threats of different types of risks.