Attivo ThreatDefend Detection and Response Platform
The ThreatDefend™ Deception and Response Platform is designed to make the entire network a trap and to force the attacker to be right 100% of the time or risk being discovered. The solution combines network and endpoint high interaction deception lures and decoys designed to provide early visibility into in-network threats, efficient continuous threat management, and accelerated incident response.
Recognized as the industry’s most comprehensive deception platform, the solution provides network, endpoint, and data deceptions and is highly effective in detecting threats from all vectors such as advanced, stolen credential, Man-in-the-Middle, Active Directory, ransomware, and insider threats. These deceptions can deploy within all types of networks including endpoints, user networks, server, data center, ROBO, cloud, and specialty environments such as IoT, SCADA, POS, SWIFT, infrastructure, and telecommunications.
The ThreatDefend Deception Platform is a modular solution comprised of Attivo BOTsink® engagement servers, decoys, and deceptions, the ThreatStrike™ endpoint deception suite, ThreatPath™ for attack path visibility, ThreatOps™ incident response orchestration playbooks, and the Attivo Central Manager (ACM), which together create a comprehensive early detection and active defense against cyber threats.
|Packaging||Hardware ApplianceVirtual Appliance/VM ImageXaaS(as a service)|