Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
The ASGARD Management Center stands out as an exceptional platform for incident response, enabling users to conduct comprehensive enterprise-wide THOR scans effortlessly. It boasts a user-friendly interface that simplifies the execution of intricate response playbooks across as many as one million endpoints, all managed from a centralized console. Delivered as a hardened virtual appliance, ASGARD includes agents compatible with Microsoft Windows, Linux, AIX, and MacOS. Its robust API allows for seamless integration with various SOAR frameworks, sandboxes, antivirus solutions, SIEM systems, CMDBs, and IPS devices, essentially connecting with any security technology you utilize. This brief demonstration illustrates how straightforward it is to initiate a scan using custom Indicators of Compromise (IOCs) sourced from a linked MISP. In this instance, we identify all events containing the term “Emotet,” incorporate them into a newly created rule set, and deploy that rule set in a fresh Group Scan utilizing THOR, showcasing the platform's versatility and efficiency in threat detection and response. Additionally, this capability enables security teams to respond more rapidly to emerging threats by leveraging real-time data and automation.
Description
Darktrace / NETWORK is an advanced AI-driven solution designed for network detection and response, aiming to thwart, identify, scrutinize, and manage both recognized and novel threats in contemporary environments. Utilizing its Self-Learning AI, the system operates directly on an organization’s data, adapting to the typical behavior of each device, user, connection, and attack vector, thereby detecting anomalies without relying on predefined signatures, past attack data, or generalized models. This solution offers comprehensive visibility across various infrastructures, including on-premises, virtual, cloud, and hybrid networks, as well as remote endpoints, operational technology (OT) devices, zero-trust network access (ZTNA), and traffic in both encrypted and decrypted forms. Moreover, it continuously refines its detection capabilities to enhance precision and minimize alert fatigue without the need for manual rule updates. The Cyber AI Analyst conducts thorough investigations at scale, forms theories, derives conclusions, ranks incidents based on potential business repercussions, and links occurrences across network, endpoint, cloud, identity, OT, email, and remote systems, ensuring a robust defense against cyber threats. Thus, organizations can benefit from a proactive security posture that evolves in tandem with emerging challenges.
API Access
Has API
API Access
Has API
Integrations
Darktrace
Pricing Details
No price information available.
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Nextron Systems
Founded
2017
Country
Germany
Website
www.nextron-systems.com/asgard-management-center/
Vendor Details
Company Name
Darktrace
Founded
2013
Country
United Kingdom
Website
www.darktrace.com/products/network
Product Features
Incident Response
Attack Behavior Analytics
Automated Remediation
Compliance Reporting
Forensic Data Retention
Incident Alerting
Incident Database
Incident Logs
Incident Reporting
Privacy Breach Reporting
SIEM Data Ingestion / Correlation
SLA Tracking / Management
Security Orchestration
Threat Intelligence
Timeline Analysis
Workflow Automation
Workflow Management
Product Features
Cloud Security
Antivirus
Application Security
Behavioral Analytics
Encryption
Endpoint Management
Incident Management
Intrusion Detection System
Threat Intelligence
Two-Factor Authentication
Vulnerability Management
Cloud Workload Protection
Anomaly Detection
Asset Discovery
Cloud Gap Analysis
Cloud Registry
Data Loss Prevention (DLP)
Data Security
Governance
Logging & Reporting
Machine Learning
Security Audit
Workload Diversity
Incident Response
Attack Behavior Analytics
Automated Remediation
Compliance Reporting
Forensic Data Retention
Incident Alerting
Incident Database
Incident Logs
Incident Reporting
Privacy Breach Reporting
SIEM Data Ingestion / Correlation
SLA Tracking / Management
Security Orchestration
Threat Intelligence
Timeline Analysis
Workflow Automation
Workflow Management
Network Monitoring
Bandwidth Monitoring
Baseline Manager
Diagnostic Tools
IP Address Monitoring
Internet Usage Monitoring
Real Time Analytics
Resource Management
SLA Monitoring
Server Monitoring
Uptime Monitoring
Web Traffic Reporting
Network Traffic Analysis (NTA)
Anomalous Behavior Detection
High Bandwidth Usage Monitoring
Historical Behavior Data
Identify High Network Traffic Sources
Network Transaction Visibility
Stream Data to IDR or Data Lake
Traffic Decryption