Auriga Security - SentinelOne - AURIGA SECURITY, INC.

AUTONOMOUS ENDPOINT PROTECTION

The only platform that defends every endpoint
against every type of attack, at every stage in the threat lifecycle.

A new approach to endpoint security

In the past couple of years, a new type of technology emerged designed to detect and prevent threats at the endpoint using a unique behaviorbased approach. Instead of looking for something known or it’s variant like signature-based detection, next-generation endpoint security is analyzing file characteristics (to uncover known and unknown file-based malware) as well as the entire endpoint system behavior to identify suspicious activity on execution. Endpoint detection and response (EDR) monitors for activity and enables administrators to take actions on incidents to prevent them from spreading throughout the organization. Next-Generation Endpoint Protection (NGEP) goes a step further and takes automated actions to prevent and remediate attacks.

How Does it Work?

Pre-Execution

Attack Prevention with Static AI
SentinelOne’s single agent technology uses a Static AI engine to provide pre-execution protection. The Static AI engine replaces traditional signatures and obviates recurring scans that kill end-user productivity.

On-Execution

Detect and Contain Threats with Behavioral AI
SentinelOne’s Behavioral AI engines track all processes and their interrelationships regardless of how long they are active. When malicious activities are detected, the agent responds automatically at machine speed. Our Behavioral AI is vector-agnostic – file-based malware, scripts, weaponized documents, lateral movement, file-less malware, and even zero-days.

Post-Execution

Visibility & Response, Remediation & Rollback with Automated EDR
SentinelOne’s Automated EDR provides rich forensic data and can mitigate threats automatically, perform network isolation, and auto-immunize the endpoints against newly discovered threats. As a final safety measure, SentinelOne can even rollback an endpoint to its pre-infected state.

Broad Protection Against Diverse Modes of Attack

Executables
Trojans, malware, worms, backdoors, payload-based

Fileless
Memory-only malware, no-disk-based indicators

Documents
Exploits rooted in Office documents, Adobe files, macros, spear phishing emails

Browser
Drive-by downloads, Flash, Java, Javascript, VBS, IFrame/HTML5, plug-ins

Scripts
Powershell, WMI, PowerSploit, VBS

Credentials
Mimikatz, credentials scraping, tokens

Exceptional Third-Party Test Results

AV-TEST, a leading independent anti-virus research institute, has awarded SentinelOne EPP the Approved Corporate Endpoint Protection certification for both Windows and OS X, which validates its effectiveness for detecting both advanced malware and blocking known threats. SentinelOne EPP is the only next generation endpoint protection vendor to obtain this certification on both platforms.
SentinelOne EPP has also been validated against PCI-DSS and HIPAA by third-party compliance assessor, Tevora. This validation now enables enterprises to replace their existing corporate antivirus suites with SentinelOne EPP and still meet PCI and HIPAA compliance requirements.

qlik

Exceptional Third-Party Test Results​

Exceptional Third-Party Test Results