Extended Threat Detection and Response

Extended Detection and Response (XDR) is provided by the following parts of Kaspersky Industrial CyberSecurity for Networks functionality:

• EDR incident information display when monitoring events to determine the status of detection processing and analyze threat evolution. The information is displayed as an activity graph and in a tabular format.
• Event enrichment with information about applications that were running when event registration conditions occurred, users who started applications, and other information.
• Manage response actions on devices that have Endpoint Agent installed. Depending on the action trigger conditions, you can enable device network isolation, prevent files from running, terminate and start processes, and delete or quarantine files.
• Automatically block network access for unauthorized devices by using network switch connectors.

You can watch the tutorial video (see below) to familiarize yourself with the functionality.

Threat detection, analysis and response

Page top