PRODUCT OVERVIEW

OpenText™ EnCase™ Endpoint Security
Deep endpoint visibility for earlier detection of advanced external and insider
threats and alert triage and fearless response, including comprehensive remediation

Realtime alertsof compromise

The rapidly evolving cyber threat landscape is reducing theeffectiveness of traditional perimeter and signature-based
security systems. Additionally, Security Information Event

High-fidelity
response andrecovery

Management (SIEM) and other alerting technologies arebombarding security teams with alerts, overtaxing their abilityto analyze, prioritize and respond to threats before irreparable
damage or data loss occurs. Organizations need to establish

Scalability
Cover all enterprise
endpoints

better visibility into endpoints to face these challenges.
OpenText™ EnCase™ Endpoint Security provides security teams with 360-degree
endpoint visibility to validate, analyze, scope and respond to incidents quickly andcompletely. As a best-of-breed endpoint detection and response (EDR) solution,
it empowers organizations to tackle the most advanced forms of attack at theendpoint, whether from external actors or internal threats. EnCase Endpoint Security
is designed with automation and operational efficiencies that help responders findand triage security incidents faster to reduce the risk of loss or damage.

"It helps us mitigate any
kind of cyber issue, any
kind of malware...andremove those threats fromour network before there is
any kind of a breach."
Fortune 500 Luxury Resort Group

Faster response time significantly reduces the risk of data
loss and system damage
Early detection of enterprise security threats with EnCase Endpoint Security
enables security teams to redefine their workflow from passive “alerting” mode toproactive “threat hunting”, actively scanning for anomalies indicative of a security
breach. It creates a baseline of endpoint activity used to detect anomalous behavior
or recreate how a data breach occurred using historical intelligence.
Response to malicious activity with EnCase Endpoint Security accelerates overall
response time, significantly reducing the risk of data loss and system damage. It
reduces triage time by up to 90 percent, helping incident response teams validate
and assess the impact of malicious activity—even polymorphic or memory-resident
malware. Organizations can also integrate EnCase Endpoint Security with thirdparty alerting technologies via RESTful APIs.
Once a threat is identified, EnCase Endpoint Security surgically contains andremediates malicious files, processes and registry keys without the need to conduct
a full wipe-and-reimage. This approach avoids the costly system downtime, loss
in productivity and lost revenue associated with traditional forms of remediation,
reducing the time to remediate a threat by approximately 77 percent.

Greater visibility via continuous monitoring of endpoints
Today’s security teams require the ability to continuously capture endpoint data toquickly identify changes and create a historical timeline of activity for root-cause
analysis. Configurable, realtime, continuous monitoring capabilities provide thenecessary level of visibility and insight required to monitor all network endpoints at
any scale.

EnCase Endpoint Security dashboards help security teams quickly prioritize alerts
and make evidence-based decisions to investigate or remediate threats.

OpenText™ EnCase™ Endpoint Security

2/4

OpenText™ EnCase™ Endpoint Security features
Continuous endpoint monitoring

Unearth cyber threats in real time across the enterprise with behavior-based
detections, inspired by industry-leading frameworks including Mitre
ATT&CK®. Included custom anomaly rule builder for focused detection ofenvironment-specific issues.

Embedded threat intelligence

Automatically prioritize alerts by severity with complete file reputation and IP
reputation analysis, displayed in a single view.

Dynamic analysis (sandboxing)

Fully assess potential zero-day threats with dynamic analysis of unknown files andprocesses for additional threat intelligence and alert contextualization.

Comprehensive remediation

Fully respond to and recover from cyber threats by isolating infected endpoints
to reduce lateral spread. eliminating malicious processes, deleting corrupted files
and resetting affected registry keys on compromised endpoints.
Leverage a simplified and streamlined response for Tier I security analysts
and a complete DFIR toolkit for Tier II/III to identify patient zero, create new IOCs,
discover unknown threat vectors and forensically investigate challenging
security issues.

Orchestration with automated response Create on-demand actions with automated response for event post-processing.
Add as many custom actions as needed to drive desired outcomes.
Off-VPN anomaly detection

Collect anomaly and telemetry data from off-VPN endpoints for quick detectionof anomalies and immediate reporting. Ability to install multiple telemetry listenercomponents for scalable solutions.

Open, RESTful API and Software
Development Kit (SDK)

Leverage integration and automation with adjacent security solutions in theenvironment for efficient security operations.

Content Security andExfiltration Defense

Monitor cloud repositories for behaviors indicative of a data security breach orinsider threat.

Full endpoint access with alow resource agent

Maximize collection capabilities and minimize business disruption and end user
CPU bandwidth usage with the lightest agent available.

Efficient operations for Tier I analysts

Bring the power of EnCase to junior analysts and incident response staff with asimplified UI and user workflows.

Training
OpenText offers a variety of professional training programs and industry-recognized certifications to help users develop expertise in EnCase software and enterprisesecurity.
ManagedTrainingSecurity Services

Managed Security Services

Threat triage and incident response

TheOpenText
Services
teamIn caseof a breachor detectionof a potentialtrainingextensive
The OpenText Professional Services team leverages
experience
toProfessional
craft response
playbooks
and custom workflows
to drive
the successof corporate
security
teams. OpenText consultants implement the necessary technology,
middleware
andworkflow automation
to ensure that organizations are prepared when the inevitableleverages
extensive
experienceto craft response
threat during threat assessment, OpenText
incident strikes.
to help users develop expertise in EnCase

provides highly skilled digital forensic incident
success of corporate security teams. OpenText
response (DFIR) professionals with decades ofconsultants
implement
theprovides
necessarytechnology
In case of a breach or detection of a potential threat during threat
assessment,
OpenText
highlyskilled digital forensic
incident
response(DFIR)
professionals
withforensic
investigation
andincident
response
decades of forensic investigation and incident response experience
tohelptriage
andremediate
theissuethroughacomplete
forensic investigation.
middleware and workflow automation to ensureexperience to help triage and remediate thethat organizations are prepared when theissue through a complete forensic investigation.
incident strikes.
Threattriage
andincident response
softwareandenterprisesecurity.

OpenText™ EnCase™ Endpoint Security

3/4Unlike other tools in the market, EnCase Endpoint Security is the most complete
threat detection and response solution. It eliminates the time it takes to detect,validate, triage, investigate and remediate known and unknown threats lurking
across the enterprise, unseen by perimeter and network solutions. An organization’ssecurity is simply not complete without the endpoint visibility provided by EnCase.

About OpenText
OpenText, The Information Company, enables organizations to gain insight throughmarket leading information management solutions, on-premises or in the cloud. For
more information about OpenText (NASDAQ: OTEX, TSX: OTEX) visit: opentext.com.

Connect with us:• OpenText CEO Mark Barrenechea’s blog
• Twitter | LinkedIn

opentext.com/contact
Copyright © 2022 Open Text. All Rights Reserved. Trademarks owned by Open Text.
For more information, visit: https://www.opentext.com/about/copyright-information • 09.22 | 21239.EN

4/4