Sangfor Cyber Command
Threat Hunting Using Network Detection and Response (NDR)
Threat Detection:
- Monitors internal traffic. Correlates security events
- Artificial Intelligence. Behaviour Analysis, GTI
- Uncovers what you don’t know
Sangfor Cyber Command
Network Detection and Response (NDR) Tool
Cyber Threat Hunting
- Uncovers hacker’s point of entry
- Analyses impacts. Collects IOCs.
- Recover attack patch
Sangfor Cyber Command
Threat Hunting Using Network Detection and Response (NDR)
Threat Response:
- Investigate Incidents
- Correlates with network and endpoint countermeasures
SEE THREATS THAT NO ONE ELSE CAN SEE
Advanced Network Detection and Response
Ransomware protection is necessary to stay safe from the network threats lurking on the internet. A good ransomware protection system includes both ransomware detection and cyber threat hunting, allowing it to identify threats early and eliminate them. This inspired us to develop Cyber Command, a next-generation, AI-driven Network Detection and Response platform that helps businesses identify threats and hunt them down. Cyber Command simplifies cyber forensics by using 100% visibility and easy integration while providing comprehensive threat detection capabilities. This enables businesses to take immediate corrective actions when a threat is found and provides a thorough network traffic analysis that will give a better understanding of why the attack took place.
Features and Capabilities
Sophisticated Detection
Faster and More Efficient Response
Simplify Threat Hunting
Sophisticated Detection
The Cyber Command Analysis Center collects a broad range of network and security data including North-South and East-West traffic data, logs from network gateways and EDRs, decodes it using network applications like DNS or mail, and applies AI analysis to uncover undesirable behavior. As Cyber Command is paired with threat intelligence, attacks on all levels of the attack chain are detected, meaning faster alerts to exploitation attempts, slow brute force attacks, C&C activities, lateral movements, P2P traffic, and data theft.
Faster and More Efficient Response
The Cyber Command Response Center provides a broad range of attack investigation experience, all presented visually within the attack chain. Threat mitigation is prioritized based on the criticality of the at-risk business assets. Combined with Sangfor Endpoint Secure and NGAF, Cyber Command provides flexible and effective mitigation in a timely manner, offering recommendations for policy or patching, endpoint correlation, and network correlation.
Simplify Threat Hunting
Cyber Command helps security administrators to perform comprehensive impact analysis of known breaches and to track “patient zero,” by evaluating all possible points of entrance. Cyber Command’s unique “Golden Eye” feature studies the behavior of compromised assets like inbound and outbound connections and usage of ports and protocols, and uses this valuable information to strengthen external and internal system defenses.
Product Values
Suggested Read on NDR and Threat Hunting
