Trellix Network Security is an advanced cybersecurity solution that automatically detects and prevents network attacks that evade traditional security measures. It combines multiple AI, machine learning, and correlation engines to identify and respond to sophisticated threats and lateral movements within minutes. The system utilizes signature-less threat detection to spot zero-day and advanced attacks, tracks and blocks lateral threats to reduce dwell time, and supports most operating systems and over 160 file types. Trellix Network Security maps threats to the MITRE ATT&CK Framework, p...
Vendor
Trellix
Company Website
Trellix Network Security is a cutting-edge cybersecurity solution designed to protect enterprise networks from advanced threats and evasive attacks. It goes beyond traditional signature- and policy-based security by leveraging artificial intelligence, machine learning, and sophisticated correlation engines. This multi-layered approach enables the system to detect and respond to complex threats, including zero-day attacks and lateral movements, within minutes of their occurrence. The solution's core strengths lie in its ability to spot attacks that evade conventional defenses, detect suspicious lateral movements within the network, and cover expanding attack surfaces. It supports a wide range of operating systems and file types, ensuring comprehensive protection across diverse IT environments. By mapping threats to the MITRE ATT&CK Framework, Trellix Network Security provides security teams with valuable context for swift containment and remediation of security incidents.
Key Features
Signature-less Threat Detection Identifies zero-day and advanced attacks that traditional security measures might miss.
- Uses Multi-Vector Virtual Execution (MVX) engine for dynamic analysis
- Employs machine learning and AI for real-time and retroactive threat detection
Lateral Movement Detection Tracks and blocks threats moving within the enterprise network.
- Utilizes over 180 rules for comprehensive lateral movement detection
- Provides complete kill-chain visibility
Extensive Coverage Protects a wide range of systems and file types.
- Supports most operating systems
- Covers over 160 file types
Benefits
Enhanced Threat Detection Improves the organization's ability to identify and respond to sophisticated cyber threats.
- Detects evasive attacks that bypass traditional defenses
- Reduces dwell time of threats within the network
Streamlined Incident Response Accelerates the process of containing and remediating security incidents.
- Maps threats to MITRE ATT&CK Framework for contextual evidence
- Integrates with other security solutions for comprehensive protection
Reduced Alert Fatigue Minimizes false positives and prioritizes critical threats.
- Validates alerts using the MVX engine
- Employs riskware categorization to separate critical threats from less malicious activity