Vectra Cognito Threat Detection and Response
Vectra AI, Inc에 의해
Vectra Cognito is a Threat Detection and Response platform using AI to detect attacker behavior
Vectra Cognito is an AI-driven cloud and network detection & response (NDR) platform that provides the fastest most efficient way to prioritize and stop attacks across cloud, data center, applications, and workloads, as well as user & IoT devices and accounts.
The Cognito® platform accelerates threat detection, investigation, and response using AI to enrich cloud logs and network metadata.
The Vectra Prevent SaaS Security Posture Management platform enables easy enforcement of security policies, provides best practices, prevents configuration drift, and protects against sophisticated attacks..
Vectra offers four applications on the Cognito platform to address high-priority use cases.
- Cognito Detect for Office365 and Azure AD™ finds and stops attacks in enterprise SaaS applications and the Microsoft 365 Ecosystem.
- Cognito Detect™ provides the fastest most efficient way to prioritize and stop attacks across cloud, data center, applications, and workloads, as well as user & IoT devices and accounts.
- Cognito Stream™ sends security-enriched metadata to data lakes and SIEMs in Zeek-format.
- Cognito Recall™ is a cloud-based application that stores and investigates threats in enriched metadata.
Cognito Detect for Office 365 and Azure AD offers detection and response capabilities for Azure Active Directory and Microsoft 365, expanding the coverage present in E5.Visibility into Power Automate, Teams, eDiscovery, Compliance Search, Azure AD backend, Exchange, SharePoint, third party SaaS providers and more.
Vectra Protect for M365 and Azure AD offers complete M365 security management coverage providing insights into security vulnerabilities within M365 tenants.
Vectra Custom Workbooks in Azure Sentinel:Bring Vectra Cognito detections straight to your Sentinel Workbook for investigation, correlation, and automation.
Microsoft Defender for Endpoint Integration:Combine Vectra cloud and data center detections with in-depth information from Microsoft Defender for Endpoint for greater context and to stop attacks at the endpoint.
For a demo or how Vectra AI will work within your environment, please contact: azure-marketplace@vectra.ai