Kaspersky Endpoint
Detection and Response

Cybercriminals are becoming ever more sophisticated and capable of successfully bypassing existing
protection. Every area of your business can be exposed to risk, disrupting business-critical processes,
damaging productivity and increasing operating costs.
With Kaspersky EDR, yourorganization can:• Efficiently MONITOR threats –beyond malware• Effectively DETECT threats – using
advanced technologies• Centrally AGGREGATE raw data
and verdicts• Rapidly RESPOND to attacks• PREVENT malicious actions bydiscovered threats… all via an intuitive web-interface thatmakes it easier to investigate and react.

Kaspersky EDR and key
takeaways from IDC’s Endpoint
Security 2020 report*

A weak EPP
solution will
destroy the valueof an EDR tool
Kaspersky offers powerfulcomplete endpoint defenses(EPP+EDR) via a single agent

People and timethus become thenew ROI metric for
EDR tools
Kaspersky applies high levelsof automation to complex
issues, freeing up yoursecurity experts’ valuabletime

EDR must leveragedata that isoutside of theendpoints

Boost your endpoint defenses firstFor cybercriminals, corporate endpoints, where data, users andcorporate systems all come together to generate and implementbusiness processes, remain the primary target. To protect yourcorporate endpoints and prevent them being used as entry points
into your infrastructure, your IT-security team should be reviewing
ways to boost your existing security. Implementing the full endpoint
protection cycle, from automatic common threat blocking toresponding swiftly and appropriately to complex incidents, requires
preventive technologies supplemented by advanced defense
capabilities.
Kaspersky Endpoint Detection and Response (EDR) provides
powerful security with comprehensive visibility across all endpoints
on the corporate network together, with superior defenses, enabling
the automation of routine tasks to discover, prioritize, investigate
and neutralize complex threats and APT-like attacks.

Highlights
Kaspersky EDR enhances our most tested, most awarded flagshipEndpoint Protection Platform (EPP) – Kaspersky Endpoint Security
for Business – with powerful EDR capabilities, further strengthening
your overall security levels. A single agent for automatic protectionagainst common threats and advanced defenses against complex
attacks simplifies incident handling and minimizes maintenancerequirements. There’s no additional burden on endpoints and nofurther costs – just the knowledge that your workstations andservers are fully protected against the most sophisticated andtargeted threats.
Kaspersky EDR reduces the time needed for initial evidencecollection, provides full telemetry analysis and maximizes theautomation of EDR processes, cutting overall incident response
times without the need to attract additional IT security resources.
Kaspersky EDR can be absorbed into the Kaspersky Anti Targeted
Attack Platform, combining EDR capabilities and network-leveladvanced threat discovery. IT security specialists have all the tools
they need to handle superior multi-dimensional threat discovery atboth endpoint and network levels, applying leading-edge technology,
undertaking effective investigations, and delivering a rapid,
centralized response — all through a single solution.

Kaspersky boosts EDR
effectiveness by adding
advanced mail- and webbased threat discovery andvisibility through a single tool
* IDC PERSPECTIVE, Endpoint Security 2020: The
Resurgence of EPP and the Manifest Destiny of EDR

Kaspersky EDR is ideal if yourorganization wants to:• Upgrade your security with aneasy-to-use, enterprise solution
for incident response• Automate threat identification& responses – without businessdisruption during investigations• Enhance your endpoint visibility& threat detection via advancedtechnologies• Understand the specific Tactics,Techniques, and Procedures(TTPs) employed by threat actors
to achieve their goals, enabling
more effective defenses andsecurity resource allocation• Establish unified and effective
threat hunting, incident
management and response
processes• Increase the efficiency of yourin-house SOC – don’t waste theirtime analyzing irrelevant endpoint
logs• Aid compliance by enforcing
endpoint logs, alert reviews
and the documentation ofinvestigation results

Rapidly uncover and contain themost sophisticated threats
Kaspersky EDR provides high-level endpoint protection andincreases SOC efficiency, delivering advanced threat discovery andproviding access to retrospective data, even in situations wherecompromised endpoints are inaccessible or when data has been
encrypted during an attack. Boosted investigation capabilities
through our unique Indicators of Attack (IoAs), MITRE ATT&CK
enrichment and a flexible query builder, plus access to our ThreatIntelligence Portal knowledge base - all these facilitate effective
threat hunting and fast incident response, leading to damage
limitation and prevention.

Use cases:• Proactive search for evidence of intrusion over your entire
network• Rapid detection and remediation of an intrusion – before theintruder can cause major damage and disruption• Rapid investigation and centralized management of incidents
across thousands of endpoints with a seamless workflow• Validation of alerts and potential incidents discovered by othersecurity solutions• Automation of routine operations – to help minimize manual tasks,
free up your resources and reduce the likelihood of ‘alert overload’

ATED & M
ANUTOM
I-AUA
M
LE
S

Data collection and centralized storage

ED DISCOMATVEORYTUAExtensive threat discovery engines

Root cause analysis
Retrospective analysis

Kaspersky (Private) Security Network

IoC-based discovery

Advanced sandboxing

Custom IoA detects

MITRE ATT&CK mapping
Automatic threat hunting
by using unique IoAs
Network detections via KATA Platform

INVESTIGATION& RESPONSE

Kaspersky Threat Intelligence Portal
Flexible query builder for proactive
threat hunting
SIEM integration

Kaspersky EDR business benefits
across the enterprise:
2020

Gartner Peer Insights Customers’
Choice for EDR Solutions 2020
names Kaspersky Top Vendor
Kaspersky is one of only 6 vendors
worldwide to receive the Gartner Peer
Insights Customers’ Choice recognition
for Endpoint Detection and Response
solution in 2020, with the highest
rating of any vendor for our service
and support - the ultimate customer
compliment for Kaspersky EDR.
Gartner disclaimer
Gartner Peer Insights Customers’ Choice constitute thesubjective opinions of individual end-user reviews, ratings,
and data applied against a documented methodology;
they neither represent the views of, nor constitute anendorsement by, Gartner or its affiliates.

• Helps eliminate security gaps and reduce attack ‘dwell time’• Automates manual tasks during threat detection and response• Frees up IT and IT security personnel for other crucial tasks• Simplifies threat analysis and incident response• Reduces the time taken to identify and respond to threats• Helps enable full compliance

And if you want even more… Kaspersky
Managed Detection and Response
Adding a fully managed and individually tailored round-the-clock
defenses to Kaspersky EDR means your IT-security resources
can be conserved by offloading incident-related processing tasks
to Kaspersky, or looking to us for expert judgements and uniquethreat hunting expertise when your in-house team lacks sufficiently
qualified security specialists to meet specific scenarios.

Detection quality confirmed by
MITRE ATT&CK Evaluation
Recognizing the importance ofTactics, Techniques and Procedures(TTPs) analysis in complex incident
investigation and the role of MITRE
ATT&CK in the security market today:• Kaspersky EDR has participated in
MITRE Evaluation Round2 (APT29)
and demonstrated a high levelof performance in detecting key
ATT&CK Techniques from Round2
scope applied at crucial stages oftoday’s targeted attacks• Kaspersky EDR’s detections areenriched with data from the MITRE
ATT&CK knowledge base, for deep
analysis of your adversary’s TTPs.

To find out more about
Kaspersky EDR, visit:kaspersky.com/enterprisesecurity/endpoint-detectionresponse-edr

Know more at kaspersky.com/MITRE

Cyber Threats News: securelist.com
IT Security News: business.kaspersky.com
IT Security for SMB: kaspersky.com/business
IT Security for Enterprise: kaspersky.com/enterprisewww.kaspersky.com
2020 AO Kaspersky Lab. All rights reserved.
Registered trademarks and service marks
are the property of their respective owners.

We are proven. We are independent. We aretransparent. We are committed to building a safer
world, where technology improves our lives. Whichis why we secure it, so everyone everywhere
has the endless opportunities it brings. Bring on
cybersecurity for a safer tommorow.
Know more at kaspersky.com/transparency