Darktrace Extends Autonomous Response to Enforce Normal Behavior on Endpoints

Rhea-AI Summary

Darktrace, a leader in cyber security AI, has introduced Antigena Endpoint, expanding its Autonomous Response technology to cover endpoints, which now house sensitive data beyond traditional infrastructure. This innovation addresses the increased cyber risks associated with flexible work arrangements and aims to protect organizations from potential threats while allowing normal operations. With Antigena Endpoint, Darktrace can detect anomalous endpoint activity and automatically respond to threats, ensuring comprehensive security for Mac, Windows, and Linux devices.

Positive

• Launch of Antigena Endpoint enhances Darktrace's product offering.
• Increased ability to protect sensitive data on endpoints.
• Intelligent micro-decisions improve threat detection and response.

Negative

• None.

AI Augments Security Teams as Flexible Work Arrangements and the 'Great Resignation' Inadvertently Increase Cyber Risk

CAMBRIDGE, England, Jan. 27, 2022 /PRNewswire/ -- Darktrace, a global leader in cyber security AI, today announced that its Autonomous Response technology now takes action on the endpoint – rounding out the Darktrace Antigena product family, which already includes coverage for SaaS applications, cloud, email, network, and Operational Technology (OT).

Endpoints have moved farther outside traditional infrastructure and have started housing even more sensitive data. As a result, CISOs and security professionals have been left grappling with the complexities of protecting their organizations and dynamic workers in the wake of flexible work arrangements and the dawn of the 'Great Resignation'.

A novel approach to this challenge could be to augment security teams with AI that learns on the job how this flexible, dynamic workforce is working. Irregularity of endpoint activity can be continuously re-evaluated, and subtle, indiscernible actions can be taken that allow productive work to continue while stopping only threatening activity.

Antigena Endpoint does just that. It detects anomalous activity and intelligently makes micro-decisions based on unusual activity, such as out-of-the-ordinary initial file downloads and data exfiltration attempts, command and control traffic or lateral movement that might represent a cyber-threat. It uses various techniques to interrupt attacks on Mac, Windows, and Linux devices, including data leaks, ransomware and insider threats.

Contextual awareness gained from other parts of the digital estate is also beneficial in stopping endpoint attacks. For example, in the case of Antigena Email and Antigena Endpoint deployed together, the precision of response is enhanced by the more nuanced understanding of new and expected senders across all endpoint and email activity. A brand-new sender soliciting an employee into making a bank transaction on its own might warrant action. But, with the added information that the website has no prior relevancy to the organization, the increased context would solidify the case and alter the system's response.

"Antigena Endpoint is the evolution of Darktrace's platform that I have anticipated and been excited about most. It truly is a game-changer and gets straight to the heart of what our customers need right now," said Mike Beck, Darktrace's Global Chief Information Security Officer. "The reassurance that Darktrace can not only detect the early signs of attacks but now also take action on all employee endpoints is more important than ever before."

About Darktrace
Darktrace (DARK.L), a global leader in cyber security AI, delivers world-class technology that protects over 6,500 customers worldwide from advanced threats, including ransomware and cloud and SaaS attacks. Darktrace's fundamentally different approach applies Self-Learning AI to enable machines to understand the business in order to autonomously defend it. Headquartered in Cambridge, UK, the company has 1,700 employees and over 30 offices worldwide. Darktrace was named one of TIME magazine's 'Most Influential Companies' for 2021.

View original content:https://www.prnewswire.com/news-releases/darktrace-extends-autonomous-response-to-enforce-normal-behavior-on-endpoints-301469953.html

SOURCE Darktrace

FAQ

What is Antigena Endpoint by Darktrace?

Antigena Endpoint is a new addition to Darktrace's Autonomous Response technology that detects and responds to anomalous activities on endpoints to enhance cyber security.

How does Darktrace's Antigena Endpoint improve security?

It enhances security by continuously analyzing endpoint activity and making automated decisions to stop potential threats while allowing normal user operations.

When was Antigena Endpoint announced?

Antigena Endpoint was announced on January 27, 2022.

What are the key features of Antigena Endpoint?

Key features include the ability to detect unusual activity and make automated micro-decisions to prevent threats across Mac, Windows, and Linux devices.

What company is behind Antigena Endpoint?

Antigena Endpoint is developed by Darktrace, a global leader in cyber security AI.

How does Darktrace's technology benefit organizations with remote work?

Darktrace's technology helps organizations manage increased cyber risks associated with remote work by providing automated threat detection and response for endpoints.