Cyber Defense eMagazine February Edition for 2022

What should agencies look for in a solution?
Skilled attackers are aware of the EDR capabilities and know how to get around them. If agencies pair a
threat hunting solution with their EDR technologies, they will have a deeper, more
comprehensive visibility over their endpoints.
When looking for the right threat hunting platform, it is crucial that agencies keep certain criteria in mind –
adaptability, scalability, and extensibility. It is also important to use a platform that is fully powered by
accurate data and can respond to threats in seconds. Here are some elements to look for when choosing
an EDR solution:
‣ Continuous monitoring of endpoints. Legacy security solutions tend to employ a collection of
incompatible point solutions tied together in a SIEM, resulting in a data set that is weeks old, and
doesn’t include unmanaged, offline, or off-network endpoints. Instead, it is important to have
a comprehensive platform to gather in-depth endpoint data, giving agencies the ability to collect
accurate, real-time data in minutes, not months
‣ Formatted, organized data. Many tools require you to export data from different sources,
normalize output, then attempt to combine it all into one report. It is important for agencies to
streamline this process through a solution that provides actionable data that is already in the
correct format for use
‣ Zero-trust architecture. Achieving a strong endpoint defense requires complete visibility into the
entire operating environment. Agencies should look for a platform with a zero-trust architecture
that continually monitors device health and checks whether it is patched, secure, compliant, and
managed
An endpoint security and management platform solution can dig deeper into the suspicious activity
detected by EDR to understand the threat and protect any additional machines that may have been
compromised. A single platform of this nature gathers in-depth endpoint data, giving agencies the ability
to collect accurate, real-time data in minutes.
The time to improve cyber is now, and everyone plays a part in this process. The federal government has
set the precedent with this memo, and agencies understand the importance of the guidance. Agencies
must implement a strong EDR solution and enhance their EDR capabilities to improve their security
posture and response capability.
Cyber Defense eMagazine – February 2022 Edition 37
Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.