What's new

The following new features and improvements have been added to Kaspersky Endpoint Detection and Response Optimum 4.0:

• Expanded Kaspersky Endpoint Security for Mac 12.2 functionality:
  • Improved the usability of response actions for alert details.
  • We added alert summaries.
  • Now you can edit IOC files directly in the Web Console when creating or editing IOC Scan task settings.
  • Now you can move detected objects to Quarantine from the alert details.
  • Now you can quarantine or delete a file, prevent execution of a file or terminate process as a result of alert response actions even if the file is an SCO (System Critical Object).
  • We added warnings for restricted actions for the Network Isolation task.
• Expanded Kaspersky Security Center Linux 15.4 functionality when using the additional functionality of Kaspersky Next XDR Optimum. You can now do the following:
  • Group alerts by attributes.
  • Configure integrations for responding to threats:
    • Integration with Active Directory enables you to perform the response actions for Active Directory users related with the alert from the alert details: reset user password, lock user account, add or remove a user from a security group.
    • Integration with Kaspersky Automated Security Awareness Platform enables you to assign Kaspersky information security courses to users who are associated with alerts.
    • Integration with Kaspersky Threat Intelligence Portal platform enables you to search for additional information on objects from the alert details and send a file from Quarantine for threat analysis.

Page top