Layer 01 of 6Included from the Silver tier
Every laptop, desktop and server. Watched.
Stops what arrives on your devices, and catches what gets through.
What it actually is
Old antivirus checks files against a list of known threats, so anything new walks straight past. This watches behaviour instead. A Word document launching PowerShell is suspicious whatever the file is called. When something fires, the device is cut off from the network in seconds.
Why it matters
Endpoints are where your people are, which makes them where attacks start.
Without this layer
One opened attachment encrypts the shared drive before anyone notices.
What we do about it
- Managed on every device: no gaps, no forgotten laptop
- Watched around the clock, not emailed to you for Monday
- Compromised machines isolated immediately, without waiting on you
The jargon, translated
- EDR
- Endpoint Detection and Response: watches how a device behaves, and lets us act on it remotely.
- Isolation
- Cutting one device off the network so an infection cannot spread.