Threat Protection

Multistage sandboxing for 30+ file types. Heuristics with deobfuscation and recursive file unpacking for 350+ types, pre-execution and analysis for 3,500+ file format families using 3,000+ static binary threat indicators. Machine learning for PE files, Office files, and PDF malware.

Patient zero protection holds files for threat detection, allowing downloads when files are benign. It sends patient zero alerts to exposed users for newly detected threats. Includes a sandbox API with MITRE ATT&CK analysis, a retrohunt API for seen files, and inline malware retention into customer cloud storage, ensuring robust cyber threat protection and advanced threat protection.

Add-on Network Threat Hunting to enable SOC/IR hunt teams with higher confidence alerts, or Deepscan on Demand for API driven submission and response for verdicts and detailed analysis to Advanced Threat Protection. C2 Beacon Detection leverages 16 new AI/ML models to detect beacons from malleable frameworks such as Cobalt Strike or Mythic as an add-on to Advanced UEBA.

Leverage Cloud Exchange with over 100 ready-to-use integrations for threat intel sharing between defenses, exporting logs, exchanging risk scores for users, apps, and devices, and automating workflows and response. Cloud TAP also provides traffic packet captures with session keys to network detection and response (NDR) solutions.

The sun never sets on global threat lab research centers producing internally developed threat intelligence, plus developing and maintaining defenses. Research includes industry segments, geographic regions, and themed reports including global malware, phishing, data sprawl, genAI and app trends, and detailed blogs on the latest threat detection and cyber threat protection methods.