An integrated system of comprehensive endpoint protection (for example, mobile devices, computers or laptops) using various security technologies. Endpoint Protection Platform example is Kaspersky Endpoint Security for Business.
An application included in a protection system for endpoint devices (Endpoint Protection Platform, EPP). EPP applications are installed on endpoint devices within the IT infrastructure of an organization (for example, mobile devices, computers, or laptops). An example of an EPP application is Kaspersky Endpoint Security for Windows as part of the EPP solution Kaspersky Endpoint Security for Business.
Indicator of Compromise. A set of data about a malicious object or action.
A file that contains a set of compromise indicators that are compared to the indicators of an event. If the compared indicators match, the application considers the event to be an alert. The alert probability may increase if exact matches of data about the object with several IOC files were found during the scan.
An open standard for Indicator of Compromise (IOC) description created on the basis of XML and containing over 500 various indicators of compromise.
An incident response action is a structured methodology of processing incidents, security violations and cyberthreats.
An attack targeted at a specific person or organization. Unlike mass attacks by computer viruses aimed at infecting maximum number of computers, targeted attacks can be aimed at infecting the network of a certain organization or even one server in the organization IT infrastructure. A special trojan program may be developed for each targeted attack.
A tenant is an organization that is provided Kaspersky Endpoint Detection and Response Optimum solution.
Encryption of the connection between two servers, providing secure data transfer between the servers in the Internet.
Application debugging, during which the application stops after execution of each command, and the execution result is displayed.
Page top