capture each users as they Adaptive security requires monitoring of “keystrokes” type away across the keyboard. No all threat vectors, including fast, antivirus on the machine to stop it would accurate assessments of potential cyber send the keystrokes to distant lands. attacks tracked to endpoint activity. The Commonwealth data in the hands of Endpoint Agent allows you to detect, hackers. That would certainly lead to a analyze, and respond to targeted cyber large # of data breaches which the attacks and zero-day exploits on the commonwealth could not afford to have - endpoint. both financially, as well as the damage When the finds evidence of potential there events would undoubtedly cause to compromises, it reports this information the commonwealth's reputation. to the HX & HXD Series appliance. It also Advance Persistent Threat Agent retrieves information and tasks (jobs) The Endpoint Agent, also referred to as from the HX & HXD Series appliance and the "HX Agent", protects your networks performs them. Tasks include upgrading by monitoring each endpoint device or indicators, requests for forensic host, collecting real-time data of events information (file, triage, and data occurring on the endpoint, and requests), and requests to contain the identifying threat activity and evidence host machine. on the host that routinely bypass signature-based and defense-in-depth security systems (i.e. APT and Zero Day attacks). Service Levels Threat activity and evidence include: - Unauthorized use of valid accounts None - Trace evidence and partial files - Command and control activity Additional Information - Known and unknown malware - Suspicious network traffic Additional information Endpoint - Valid programs used for malicious Protection can be found at purposes or - Unauthorized file access
capture each users “keystrokes” as they type away across the keyboard. No antivirus on the machine to stop it would send the keystrokes to distant lands. Commonwealth data in the hands of hackers. That would certainly lead to a large # of data breaches which the commonwealth could not afford to have - both financially, as well as the damage there events would undoubtedly cause to the commonwealth's reputation. Advance Persistent Threat Agent The Endpoint Agent, also referred to as the "HX Agent", protects your networks by monitoring each endpoint device or host, collecting real-time data of events occurring on the endpoint, and identifying threat activity and evidence on the host that routinely bypass signature-based and defense-in-depth security systems (i.e. APT and Zero Day attacks). Threat activity and evidence include: - Unauthorized use of valid accounts - Trace evidence and partial files - Command and control activity - Known and unknown malware - Suspicious network traffic - Valid programs used for malicious purposes - Unauthorized file access Adaptive security requires monitoring of all threat vectors, including fast, accurate assessments of potential cyber attacks tracked to endpoint activity. The Endpoint Agent allows you to detect, analyze, and respond to targeted cyber attacks and zero-day exploits on the endpoint. When the finds evidence of potential compromises, it reports this information to the HX & HXD Series appliance. It also retrieves information and tasks (jobs) from the HX & HXD Series appliance and performs them. Tasks include upgrading indicators, requests for forensic information (file, triage, and data requests), and requests to contain the host machine. Service Levels None Additional Information Additional information Endpoint Protection can be found at or
OA-OIT-Service-Catalog.docx