17-09-2021

AhnLab EDR

  1. Ahnlab Epp Management Llc
  2. Ahnlab Epp Management Software

Enhanced Response
with Holistic Visibility

AhnLab EDR is an endpoint detection and response solution that provides actionable insights and holistic visibility for enhanced response.

AhnLab EPP​ Patch Management는전문 인력으로 구성된 안랩 패치랩 기반의 차별적인 패치 안전성과 다양한 관리자 편의 기능을 제공해 비즈니스 연속성과 업무 생산성 향상에 기여합니다. AhnLab EPS provides the control and management tools you need to protect your critical infrastructures from malicious threats. Utilizing a lightweight agent, AhnLab EPS ensures system availability of various fixed function systems, such as Industrial Control Systems (ICS), Point of Sale (POS) Terminals, KIOSKs, and ATMs.

AhnLab EDR is an Endpoint Detection and Response (EDR) solution that continuously monitors endpoints for comprehensive threat detection, analysis, and response.

New and unknown malware, including ransomware, and malware variants are intensifying at an alarming pace - but organizations do not have adequate response measures in place and rely on traditional endpoint security measures.

To mitigate the risks and strengthen your resiliency in security incidents, EDR technology is necessary. AhnLab EDR provides a total process of information detection, analysis, response, and prediction at endpoints. The response process enables holistic visibility into threats with continuous monitoring and recording of every activity in endpoints, analyzing the flow and enabling stronger response.

Resources
[White Paper] A Simple Guide to Understanding EDR
Download

AhnLab EDR provides optimized response and endpoint visibility against threats via adaptive management.

Enhanced Threat Visibility

AhnLab EDR collects, saves, and analyzes all endpoint activities and behavioral data using an exclusive behavior analysis engine. It categorizes and classifies the collected data into actionable insights to enable prompt response. AhnLab EDR enables easy-to-understand, intuitive monitoring of endpoint threats through the process tree.


Optimized Response via Adaptive Management

Based on AhnLab EPP – a unified security management platform – AhnLab EDR provides optimized response via a single agent. Through AhnLab EPP, AhnLab EDR operates with other endpoint solutions with no additional agent installation required. AhnLab EDR also provides flexible interoperation with third-party solutions are provided, thereby strengthening threat intelligence. Through AhnLab's adaptive management system, a stronger and faster user-oriented response is made possible.

Ahnlab epp management llc

With enhanced threat visibility, AhnLab EDR provides optimized response for advanced threats in various environment. AhnLab EDR provides the following benefits:

1. Enhanced Response via Holistic Threat Visibility

  • - Provides detailed analysis, such as the type of threat, point of entry, and target user
  • - Collects all OS-based behavioral data concerning processes, files, registries, networks, and systems
  • - Identifies threats via its exclusive behavior analysis engine and event timeline analysis
  • - Offers a watchlist of suspicious behaviors, such as injection, system setting change, network connection, and ransomware behavior

2. Actionable Insights for Prompt Response

  • - Classifies the data into actionable insights, such as behavior type and severity
  • - Uses intuitive process tree for quick identification of threats
  • - Organization’s security team can actively respond to threat through proactive management
  • - Provides detailed information, such as recommended response actions, reference links, and threat information mapped to MITRE ATT&CK techniques and tactics

3. Connected and Robust Protection

  • - Connecting policy and security measures with other endpoint security solutions available –based on AhnLab EPP
  • - Flexible interoperation with third-party solutions

4. Cost-Effective Deployment and Minimal Management Burden

Ahnlab Epp Management Llc

  • - Run on single agent and at-a-glance management console– based on AhnLab EPP
  • - Vast range of functions can be monitored and controlled via a single interface
  • - No additional agent needed and can run simply by adding a license

AhnLab EDR is easy to deploy via the AhnLab EPP Agent and requires no additional agent installation or kernel driver for EDR operation.

AhnLab EDR Details
System Support
OS
  • · Windows XP SP3 / Vista / 7 / 8(8.1) / 10

  • · Windows Server 2003(+SP2, +R2) / 2008(+R2) / 2012(+R2) / 2016 / 2019

  • * 64-bit is supported for the above OS

LanguageKorean, English, Chinese(simplified), Japanese

Ahnlab Epp Management Software

※ Recommended server specifications vary according to your environment. For more information, please contact us at global.sales@ahnlab.com