Fortinet announced enhancements to the FortiEDR solution, including new MITRE ATT&CK tags for system activity, new managed detection and response (MDR) service options and the recently announced extended detection and response (XDR) capability.
said “Unlike traditional Endpoint Protection Platform (EPP) products that bolt on Endpoint Detection and Response (EDR), or first generation EDR solutions that add EPP later, FortiEDR is the only solution that was built as a unified solution from the start. As a result, it seamlessly provides behavior-based protection, detection and response at both pre-infection and post-comprise stages as demonstrated in the recent MITRE ATT&CK Evaluation results. In the past year, FortiEDR customer adoption grew more than 300 percent. This advancement in endpoint security is critical to defend against the sophistication and maliciousness of recent high profile cyberattacks and evolution of ransomware.”
Ransomware attack trends continue to evolve and impact more and more organizations. From the middle to end of last year, FortiGuard Labs saw a sevenfold increase in volume of attacks. As modern ransomware attacks place data and lives at risk, organizations need to secure their environments and to protect critical infrastructure. To address these challenges, FortiEDR, as part of the Fortinet Security Fabric, delivers patented ransomware protection without any dependency on shadow copies that the more sophisticated cyberattacks disable. Additional patented detect and defuse capabilities thwart other classes of advanced threat while maintaining high availability even in the midst of a security incident. This also buys valuable time needed for full incident response.
Unlike other endpoint protection solutions that rely on known threat intelligence to block attacks or blunt tools for detection and response, FortiEDR provides durable behavior-based protection and ongoing analysis and automatable response that can roll back malicious changes without taking machines offline to re-image. Additionally, FortiEDR’s incident response playbooks enable organizations to easily pre-define common response actions based on endpoint groups, asset value and threats categorization. This allows companies to take a risk-based approach to endpoint security, and speed the incident response process.
As proven by the latest MITRE test, FortiEDR leverages patented code tracing technology to track all system activities, identify at-risk behavior and step in to block before damage is done. FortiEDR can then also unwind the damage and restore the system. This approach is more accurate, decreasing false positives, more durable as its harder to evade, and able to detect novel and zero day threats, including supply chain attacks.
