Trend Micro Deep Discovery Inspector — a solution that works at the network level, analyzing incoming, outgoing, and internal traffic in real time, helps monitor port activity and over 105 network protocols, including HTTP, SMTP, FTP, SMB, DNS, to detect cyber threats and targeted attacks.
Using specialized detection and analysis engines in an isolated software environment, Deep Discovery Inspector helps detect unknown malware, ransomware, 0-day exploits, lateral movement, C&C communications, and attacker actions.
Functional features
Network traffic analysis (HTTP, SMTP, FTP, SMB, DNS, etc.) to detect threats
Centralized visibility and management capabilities through Trend Micro Deep Discovery Inspector
Availability of a full-fledged built-in sandbox for investigating hidden threats in an isolated environment
Detection of lateral movement, unauthorized use of accounts, C&C, etc.
Integration with SIEM systems such as: HP Arcsight, IBM Qradar, Splunk, etc.
Creating rules for automatic threat detection/blocking
Benefits of the solution:
- Detect file modifications, encryption behavior, and changes in backup and restore processes
- Ability to decrypt TLS traffic for further investigation
- Identifying malicious content in files and documents
- Generation of OpenIOC, STIX, PCAP files for further investigation of incidents
- Automatic distribution of IOCs among Trend Micro and other developer solutions
- Providing an assessment of the risk level of objects after analysis in the sandbox Virtual Analyzer
- Support for both physical hardware and virtualization systems
Problems it helps solve Trend Micro Deep Discovery Inspector:
- Building a map of the attacker's movement: from the point of penetration to the exploitation of vulnerabilities, through integration with other security systems (EDR, ESG, etc.)
- Threat detection at the network traffic level
- Tracking suspicious activities on the internal network that may indicate compromise or an attacker's movement through the network
- Analysis of unknown malware
- Identifying interactions with C&C servers to prevent data leakage and attack development
- Automation of response and data transfer to SIEM/SOAR systems to further prevent the spread of threats across the company's internal network
Trend Micro Deep Discovery Inspector helps provide proactive protection of the corporate network from threats by combining traffic analysis, behavioral monitoring, and an integrated sandbox to detect malicious content on the company's network. With threat detection and response capabilities, the solution allows companies to minimize risks and increase the level of security of the company's internal network.
Entrust the security of your business to professionals! Get a free consultation from experts Seeton:
Get a consultation
Always in touch to ensure the continuity of your business!
Learn more and get consultation from Seeton Cyber Security Group!
PARTNER: