Sophos Endpoint (EDR)

SOPHOS Endpoint Detection and Response (EDR)

The first EDR designed for security analysts and IT administrators

Built for IT Security Operations and Threat Hunting

Leverage endpoint, server, firewall and other data sources

Add Expertise Not Headcount

30 days of cloud storage and 90 days on-disk data retention

EDR Starts With the Strongest Protection

Invest in a security ecosystem

Ask any question about what has happened in the past – and what is happening now.

Sophos EDR gives you the tools to ask detailed questions when hunting down threats and strengthening your IT security operations posture.

You get access to powerful, out-of-the-box, customizable SQL queries that access up to 90-days of endpoint and server data, giving you the information you need to make informed decisions.

Example questions include:

Why is a machine running slowly? Is it pending a reboot?
Which devices have known vulnerabilities, unknown services or unauthorized browser extensions?
Are there programs running on the machine that should be removed?
Are processes trying to make a network connection on non-standard ports?
Have any processes had files or registry keys modified recently?

Remotely Respond with Precision

With Intercept X it is easy to take action even if the device requiring attention is not physically present. From the same cloud management console you can remotely access devices in order to perform further investigation, install and uninstall software, or remediate any additional issues.

Using a command line tool you can:

Re-boot devices
Terminate active processes
Run scripts or programs
Edit configuration files
Install/uninstall software
Run forensic tools

EDR That's Built on the Strongest Protection

Other EDR tools are weak at protection. These tools force users to waste time on incidents that should have been stopped in the first place. Sophos takes a different approach to EDR. We combine EDR with the industry’s best endpoint and server protection. Together, they block the vast majority of threats before they need manual investigation. This leads to a lighter workload and less noise, so you can focus on the greatest potential threats.

Stop Unknown Threats

Deep learning technology is an advanced form of machine learning, detecting malware even when it has never been seen before

Don’t Get Held for Ransom

Anti-ransomware protection stops ransomware from encrypting your files and rolls them back to a safe state

Block Exploits

Exploit techniques are commonly used to break into organizations. Intercept X uses exploit prevention to stop these dangerous attacks

Deny Hackers

Stop real-world hacking techniques used for credential harvesting, lateral movement, and privilege escalation

Managed Threat Response

Threat Hunting

Proactive 24/7 hunting by our elite team of threat analysts. Determine the potential impact and context of threats to your business.

Response

Initiates actions to remotely disrupt, contain, and neutralize threats on your behalf to stop even the most sophisticated threats

Continuous Improvement

Get actionable advice for addressing the root cause of recurring incidents to stop them for occurring again