ThreatBook OneSEC EDR

EDR Module:
Powerful, Standard-Compliant EDR

• Comprehensive Collection: Over 100 types of behavioral data & 100+ context fields.
• Micro-Precision Detection: Gain full MITRE ATT&CK coverage with hundred-billion-node graph technology, combining dynamic IoAs and static IoCs.
• Complete Tracing: Underlying event chaining for full attack path tracing & impact assessment.
• Efficient Response: One-click intelligent response facilitates cleaning sequences and post-incident forensics.

Antivirus Module:
Zero False Positives Since Initial Test of VB100 A-Grade Certification (May 23, 2022)

• Comprehensive Coverage: Achieve full malware coverage with 70+ engines providing hybrid cloud-local scanning.
• Precision Detection: Minimize false positives through optimized whitelisting and a comprehensive PUA library.
• Flexible Deployment: Lightweight EDR modules for easy integration, scaling seamlessly with your current endpoints.

Managed EDR (MEDR) Module:
Security Experts On-Demand

• Cloud Support: Rapidly scale your SecOps team with expert cloud onboarding.
• Rapid Response: Rapid 10-minute critical incident response, backed by remote emergency response and analysis expert support.
• Measurable Impact: Visible improvement in advanced threat mitigation.
• Security Closed-Loop: Automated SOC for critical incidents, ensuring a robust safety backstop.

Secure DNS Module:
Stable, Low-Cost Secure DNS

• Instant Blocking: Real-time threat blocking via lightweight DNS gateway agent.
• High Performance: Fast, stable resolution with a proven public DNS foundation.
• One-Minute Deployment: SaaS-based, deployable instantly via a simple DNS redirect.
• Proven at Scale: 11 years of zero downtime. Trusted by 5,000+ enterprises.

Application Control Module:
Lightweight, User-Friendly and Flexible

• Easy Registration: Asset table import enables instant user-to-endpoint mapping.
• Flexible Policies: Support for multi-level device grouping and differentiated policy application.
• Risk Mitigation: Alerts for risky software and high-risk vulnerabilities, with one-click disabling of risky applications.