www.AmericanSecurityToday.com https://www.youtube.com/watch?v=Dhzyrn6gs_Q
July 2020 - Edition 46
(Learn More as Carolyn Crandall and Tony Cole discuss Attivo Networks’ newest product
Endpoint Detection Net, which tackles endpoint security challenges head-on by making
every endpoint a decoy designed to disrupt an attacker’s ability to break out and further
infiltrate the network.)
both the analysis and the correlation
of attack data.
Additionally, deception can automate
incident response actions,
such as isolating an infected endpoint
or blocking the affected
network segment through builtin
integrations with existing security
controls.
Security teams can also gain oper
ational efficiencies by automatically
sharing attack data with
their SIEM, EDR, and other controls
to accelerate threat hunting
and containment.
Automation requires accuracy
and confidence in the
alert
Substantiated alerts are a critical
aspect of automated tools.
30