This archive report was first published on 10 June 2020.
Sophos Unveils Enhanced Endpoint Detection and Response to Boost Kenya's Cybersecurity ¶
June 10, 2020 - Sophos has unveiled an updated version of its Endpoint Detection and Response (EDR) to give Kenya's organizations the threat intelligence and security expertise needed to quickly identify, prioritize, and respond to issues.
The new version of EDR is designed to make it faster and easier for security analysts to identify and neutralize evasive threats, and for IT administrators to proactively maintain secure IT operations to reduce risk.
According to Sharon Ombongi, Country Manager Kenya, Sophos, security and IT teams of regional organizations often lack the visibility needed to detect threats, and breaches can take months to detect. Sophos Advanced EDR solves this problem by drastically reducing the time it takes to detect indicators of compromise.
"Servers and other endpoints are all too insufficiently protected, creating vulnerable entry points that are ripe for attackers to exploit," points out Dan Schiappa, Chief Product Officer, Sophos. "Sophos EDR therefore helps identify these attacks, preventing breaches and shining a light on otherwise dark areas. Live querying capabilities only available with Sophos EDR in Intercept X enable organizations to search for past indicators of compromise and determine the current system state. This level of intelligence is critical in understanding changing attacker behaviors and reducing attacker dwell time."
As part of the announcement, Sophos also published new research, "An Insider View into the Increasingly Complex Kingminer Botnet," underscoring the use of servers in carrying out attacks and the importance of threat intelligence in detecting such activity.
Kingminer shares many of the attributes that advanced ransomware attackers use to gain access, evidence of the need for EDR with the ability to hunt active attacks. According to Sophos recent State of Ransomware 2020 survey, only 24% of organizations breached in a ransomware incident were able to detect the intrusion and stop it before it was able to encrypt their files.
Available now in Sophos Intercept X Advanced with EDR and Intercept X Advanced for Server with EDR at no added cost, Sophos EDR will support Windows, macOS, and Linux. Its new Live Discover and Live Response features are easily managed in the threat analysis center on the cloud-based Sophos Central platform for real-time information sharing with Sophos' entire portfolio of next-generation cybersecurity solutions via its unique Synchronized Security approach.
