Endpoint Defense (EDR)
Main Features of the Service
24/7 Monitoring
Techfirm’s JSOC team continuously monitors the security of servers and workstations using the advanced EDR solution.
Detection of Sophisticated Attacks
EDR empowers Techfirm’s JSOC experts to identify complex attacks that basic endpoint defenses might miss.
Early Threat Detection
The JSOC team detects targeted attacks, ransomware, and emerging threats at their earliest stages.
Expert Protection from Cyber Attacks
Continuous Rule Enrichment
Techfirm continuously enriches rules, indicators of compromise, and signatures with insights from experts at the Techfirm research center.
24/7 Monitoring
With six branches across different time zones, a business analyst is always available to address complex issues at any hour of the day.
Key Benefits
Saving Resources
The JSOC’s 24/7 team of analysts monitors and analyzes events on servers and workstations, notifies about incidents, and provides recommendations for remediation. This alleviates routine tasks and saves time for the information security department staff.
Detecting Information Security Policy Violations
EDR identifies the installation of unwanted applications, unauthorized employee actions on workstations and servers, and unsafe settings.
Protection Against Undetected Threats
The JSOC experts analyze events on servers and workstations to identify known and emerging threats that standard information security systems may miss, including:
- Encryptors
- Complex and targeted attacks
- Fileless malware
- Attacks via compromised accounts
- Internal threats from employees and contractors
- New malware lacking signatures and detection rules in endpoint protection systems
The Endpoint Protection Service is built on Techfirm's JSOC.
The Endpoint Defense (EDR) service complements the core Techfirm JSOC service for monitoring and responding to information security incidents (MDR).
EDR agents are deployed on critical servers and workstations within the customer’s infrastructure to gather information about events on end nodes.
Techfirm’s team of analysts reviews the collected events, identifies incidents using expert rules, notifies the customer of any identified incidents, and provides recommendations for response.