Symantec Endpoint Detection and Response

Detect and expose attackers in your environment—no new agent required.

Supported by deep endpoint visibility, precisely detect and actively hunt threats to quickly expose and fully resolve them, no matter how persistent.

• Instantly detect advanced attack methods using behavioral policies continually updated by Symantec researchers.
• Detect new attack patterns in minutes, and alert responders to attacks in progress, with analytics continuously trained by global telemetry.
• Quickly analyze attack chains and remediate impacted systems using risk-scored history of endpoint activity.
• Expose sophisticated attack tactics and techniques using MITRE ATT&CK event enrichment and cyber analytics.
• Supports 'zero trust' threat hunting with advanced forenics tools that use full memory scans and metadata acquisition to find injections, process hollowing, shellcode, and more.
  

Contain and respond to threats with SEP-integrated Endpoint Detection and Response (EDR).

• Investigate and contain suspicious events using advanced sandboxing, blacklisting, and quarantining.
• Gain visibility into attack history by continuously recording activity, and retrieving endpoint process dumps.
• Seal off potentially compromised endpoints during an investigation with endpoint isolation.
• Delete malicious files and associated artifacts on all impacted endpoints, returning endpoint to its pre-infection state.