Bit9 adds threat indicator to detect advanced attacks

Bit9 has added new detection and forensic capabilities to its platform to leverage endpoint and server sensor technologies.

The additions allow for a continuous recording of all activity on endpoints and servers to be made, which can help identify attack patterns, according to Bit9.

New additions allow an organisation to install a single agent on an endpoint or server to provide advanced threat detection, protection and forensics simultaneously, as well providing enterprise-wide information without polling or scanning, it added.

The company said this ability is powered by Bit9's new Advanced Threat Indicators (ATI) that identify  threat patterns based on file and process attributes and behaviours, find threats in real-time, in the past and based on a sequence of events and leverage the cloud-based Bit9 Software Reputation Service.

This article originally appeared at scmagazineuk.com