Kaspersky Anti Targeted Attack Platform

In Use

• 

  Proven cyber-defense approaches in a single solution

  Kaspersky Anti Targeted Attack with boosted EDR capabilities forms an Extended Detection and Response solution. It fully integrates with Kaspersky Endpoint Security for Business, which shares a single agent with Kaspersky EDR, and with both Kaspersky Security for Mail Server and Kaspersky Security for Internet Gateway to provide automated gateway-level responses to complex threats. The all-in-one nature of this solution significantly reduces the time and effort your IT security teams need spend on threat protection, thanks to maximum automation of defensive actions at both network and endpoint levels, and contextual incident representation in the single web console.

• 

  A unique process to counter targeted attacks

  Centralized monitoring and control of potential points of penetration into your infrastructure quickly identifies the actions of attackers circumventing traditional corporate network protection. Automating the collection of data, the ability to perform analysis, investigation and incident response tasks from a single web console increases incident processing speeds and IT security team productivity. Complete visualization, the ability to conduct deep network traffic analysis, threat emulation with advanced sandboxing, and powerful EDR capabilities, all accelerate investigation and response to complex threats and multi-stage attacks.

• 

  Threat Intelligence and MITRE ATT&CK enrichment

  The platform provides a detailed analysis of the threat’s scope and supports the automated comparison of internal investigation results with global reputation data (Kaspersky Security Network) and manual threat queries (the Kaspersky Threat Intelligence Portal) to gain additional context for effective threat hunting and to accelerate the incident investigation process. Enrichment with MITRE ATT&CK data provides details about the ATT&CK-defined technique used, descriptions and mitigation strategies. You automatically benefit from top-level threat research, without overloading your own in-house experts.