Fortinet FC1-10-FEDR0-351-01-60 Response Subscription License, 5 Year

Fortinet, FC1-10-FEDR0-351-01-60, Protect and Response Subscription License (5 Years), 25 Assets

FortiEDR is an endpoint protection solution that provides both comprehensive machine-learning anti-malware execution and real-time post-infection protection. From day one, it automatically detects and defuses potential threats in real time even on already infected hosts. The defusing post-infection protection layer controls outbound communications and file systems modifications to prevent data exfiltration, lateral movement and C2 communications as well as file tampering and ransomware. With automated EDR functions for threat hunting and incident response, FortiEDR eliminates the breach response time gap, dwell time, and alert fatigue. Additionally, it protects systems and supports broad OS coverage workstations, servers and virtual machines, including legacy operating and embedded systems.

Features:

• Automate investigation with minimal interruption to end users
• Patented code-tracing technology delivers full attack chain and stack visibility which points to the smoking gun even if the device is offline
• Preserve memory snapshots of in-memory attacks for memory-based threat hunting
• Guide interface displays clear explanations why the event is flagged as suspicious or malicious, lists corresponding MITRE attack framework as well as logical next step for forensic investigation