MITRE ATT&CK Evaluations Trend Micro #1 in Initial Overall Detection

As the threat landscape continues to change, it’s not enough to just have advanced security protecting your users and infrastructure.

As Gartner explains in Innovation Insight for Extended Detection and Response,

“The primary value propositions of an XDR product are to improve security operations productivity and enhance detection and response capabilities by including more security components into a unified whole that offers multiple streams of telemetry, presenting options for multiple forms of detection and concurrently enabling multiple methods of response.”

Read the full report to get insights from Gartner on the advantages and risks of utilizing an XDR solution.

Gartner, Innovation Insight for Extended Detection and Response, Peter Firstbrook, Craig Lawson, 19 March 2020

Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

Fornecendo Detecções de Maior Confiança

Neste teste, a MITRE assumiu a persona do APT29, uma família de ameaças atribuída ao governo russo e que opera pelo menos desde 2008. Como participante pela primeira vez na avaliação da MITRE ATT&CK, estamos orgulhosos de termos sido classificados entre os principais fornecedores de EDR por nossas taxas de detecção — mostrando um grande equilíbrio de recursos de detecção em toda a cadeia de ataque.

Section 1 - Column 2. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Section 1 - Column 3. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Section 1 - Column 4. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

MITRE ATT&CK EVALUATIONS — APT29
Resultados da Trend Micro

Acesse o Relatório

Baixe o resumo

Section 2 - Column 4. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Destaques dos resultados da Trend Micro na avaliação do MITRE ATT&CK:

Líder em detecção, com base nas configurações iniciais do produto, com taxa de detecção de 91%.

Detectou particularmente bem em técnicas de ataque individuais, que são detecções de maior grau de confiabilidade.

Volumes de alerta gerenciados para evitar fadiga de alerta. Um nível mais baixo de alertas combinado com uma alta taxa de detecção significa que reduzimos o ruído de todas as detecções em um número mínimo de alertas significativos e acionáveis.

Telemetria = Visibilidade. Damos aos analistas de segurança acesso ao tipo e profundidade de visibilidade de que precisam ao examinar as atividades detalhadas do invasor.

Nossos resultados de cobertura de detecção teriam permanecido fortes sem o envolvimento humano — cobertura de detecção de aproximadamente 86%. Ao agregar nosso serviço de MDR, a taxa aumentou para 91%.

Section 3 - Column 3. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Section 3 - Column 4. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Você tem perguntas sobre segurança ou deseja saber mais?

Fale Conosco

Section 4 - Column 2. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Section 4 - Column 3. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Section 4 - Column 4. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

5.) “At runtime, replace antivirus-centric strategies with a “zero-trust execution”/default deny approach to workload protection where possible, even if used only in detection mode,” as per Gartner’s report.

Workload Security provides anti-malware, with behavioral analysis and machine learning, as well as application control that uses a default-deny approach for detection or protection of workloads. We believe this allows us to meet the recommendation above.

Section 5 - Column 2. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Section 5 - Column 3. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Section 5 - Column 4. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

6.) “Architect for CWPP scenarios where runtime agents cannot be used or no longer make sense,” as per Gartner’s report.

For scenarios where runtime agents cannot be used or no longer make sense, Trend Micro offers anti-malware, vulnerability, and secret scanning in the development pipeline. With Container Security and Application Security, development teams can integrate security libraries for detection and protection in PaaS-based environments. We believe this allows us to meet the recommendation above.

Section 6 - Column 2. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Section 6 - Column 3. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Section 6 - Column 4. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

7.) As per Gartner’s report, “Require CWPP vendors to offer integrated cloud security posture management (CSPM) capabilities to identify risky configurations.”

Trend Micro offers integrated cloud security posture management (CSPM) with Trend Micro Cloud One™ – Conformity, real-time continuous assurance and visibility over your cloud infrastructure. We believe this allows us to meet the recommendation above.

Section 7 - Column 2. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Section 7 - Column 3. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Section 7 - Column 4. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

This is the test as title

[+]

Simplify your decision

ShowHide Section - Column 1. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

ShowHide Section - Column 2. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

ShowHide Section - Column 3. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

ShowHide Section - Column 4. Praesent non velit ut libero condimentum pulvinar sed vitae tellus.
Vestibulum id tristique elit. Suspendisse posuere rutrum sodales. Nam id elit ac sem iaculis lacinia posuere vitae metus.

Innovative Insights from Gartner

Avaliação MITRE ATT&CK:
Trend Micro nº1 na Detecção Geral Inicial

Gartner, Innovation Insight for Extended Detection and Response, Peter Firstbrook, Craig Lawson, 19 March 2020

Fornecendo Detecções de Maior Confiança

MITRE ATT&CK EVALUATIONS — APT29
Resultados da Trend Micro

Destaques dos resultados da Trend Micro na avaliação do MITRE ATT&CK:

Você tem perguntas sobre segurança ou deseja saber mais?

5.) “At runtime, replace antivirus-centric strategies with a “zero-trust execution”/default deny approach to workload protection where possible, even if used only in detection mode,” as per Gartner’s report.

6.) “Architect for CWPP scenarios where runtime agents cannot be used or no longer make sense,” as per Gartner’s report.

7.) As per Gartner’s report, “Require CWPP vendors to offer integrated cloud security posture management (CSPM) capabilities to identify risky configurations.”

Simplify your decision

Avaliação MITRE ATT&CK:Trend Micro nº1 na Detecção Geral Inicial

Gartner, Innovation Insight for Extended Detection and Response, Peter Firstbrook, Craig Lawson, 19 March 2020

Fornecendo Detecções de Maior Confiança

MITRE ATT&CK EVALUATIONS — APT29Resultados da Trend Micro

Destaques dos resultados da Trend Micro na avaliação do MITRE ATT&CK:

Você tem perguntas sobre segurança ou deseja saber mais?

5.) “At runtime, replace antivirus-centric strategies with a “zero-trust execution”/default deny approach to workload protection where possible, even if used only in detection mode,” as per Gartner’s report.

6.) “Architect for CWPP scenarios where runtime agents cannot be used or no longer make sense,” as per Gartner’s report.

7.) As per Gartner’s report, “Require CWPP vendors to offer integrated cloud security posture management (CSPM) capabilities to identify risky configurations.”

Simplify your decision

Avaliação MITRE ATT&CK:
Trend Micro nº1 na Detecção Geral Inicial

MITRE ATT&CK EVALUATIONS — APT29
Resultados da Trend Micro