G DATA XDR
Cyber protection functions
Detect
The G DATA Agent installed on your endpoints contains various components. These include several sensors that collect events of a specific type.
Among other things, you can detect …
-
the creation or deletion of processes/files.
-
access to the Windows Registry.
-
entries in the Windows Event Viewer.
-
software uninstalls / installs.
In addition, the G DATA Agent communicates with the G DATA Cloud Backend systems to detect patterns and proactively identify unknown threats.
Prevent
Additional components within the G DATA Agent are the actors, which can perform operations on endpoints.
Among other things, the G DATA Agent can …
-
delete files.
-
terminate processes.
-
prevent the execution of processes.
-
block network connections.
Make visible (report)
The G DATA Agent intervenes in the case of known security threats—among other things by stopping processes and moving malware files to quarantine—to prevent damage.
It attempts to detect unknown threats by monitoring the entire system for characteristics of an attack and to prevent damage using the same means that it uses for known threats.
In addition, G DATA XDR helps make security-relevant events visible and provides indications to initiate further measures for containment of possible attacks.
A key part of operating G DATA XDR is the continuous monitoring of the alerts displayed in the G DATA Web Portal.
These must be reviewed regularly, assessed, and addressed promptly. The user independently decides whether
further measures or action are necessary.
For this purpose, information pages are available to help you assess incidents and manage quarantined artifacts.
Act
Different needs for action may arise from the insights gained. This can vary widely, from ignoring the event to shutting down the entire operation. It is of crucial importance that the user of the product draws the correct conclusions from the information and acts appropriately. Please refer to the User responsibility.
For customers who require assistance from an experienced SecOperations team, G DATA offers the product G DATA MXDR. If you are interested in learning more about this building block of cybersecurity, please contact our Sales team.