Security Management
The complexity and related costs in protecting the asset is assumed by the service provider, who provides added value in offering the managed service. The incident monitoring and response service is transparent to the user, who receives real-time alerts and vulnerability remediation alternatives. However, if required, the client can have a view of the monitoring platform, exactly as Information Security specialists would handle it.
The service is fully configurable to the needs of the client. In this sense, there may be different service options, depending on the characteristics of the business. This is a solution that supports the main brands in the market, allowing the integration of monitoring with operating systems, infrastructure, databases, and security components installed for the client.
Security Management Overview
It enables you to quickly identify malware and other threats by scanning your endpoints for the presence of OTX-catalogued IOCs.
It’s the only service that natively uses OTX’s community-driven threat intelligence to scan your endpoints for known Indicators of Compromise (IOCs).
It uses the same agent-based approach as expensive endpoint security tools and DIY open-source agents without the expense, complexity, or guesswork.
Upon agent activation, device data is collected and stored in OTX, including computer name, host name, external IP, operating system type and version.
Scans return additional data, which is fully displayed in the Scan Results view. This may include file path, IP address and ports (source and destination), command line of running processes, process IDs, process working directories, file hashes of your system (SHA-1, SHA-256, MD5).
Note: The agent only collects the relevant data to detect threats during endpoint scans. All data is available in the Analysis Results view.
