How we are different

Most EDR solutions can best be described as event-based. They monitor for OS events and use Incidents of Compromise (IoCs) to determine if an attack has happened. Event-based EDR vendors needs to see an attack and then update their IoCs, leaving their users exposed in the interim.
• CounterTack was the first EDR solution based on behavior. CounterTack’s unique and true behavior approach applies in-memory threat detection. We introduced our patented Digital DNA over 10 years ago. It detects suspicious behavior in the one place cybercriminals can’t avoid detection – in memory. Digital DNA is truly the last line of defense and the most reliable solution for detecting new and unknown attacks that other solutions miss. It is a technology that is licensed to other security solutions including Symantec, Rapid 7 and several others under non-disclosure.

• CounterTack provides truly Predictive EDR. Other solutions can’t discover threats until they carry out their behaviors (post-breach). Digital DNA observes behaviors as they unfold in memory. CounterTack applies predictive analytics that 1) Scores behaviors based on suspiciousness. 2) Puts the behaviors in context, and 3) Predicts what the behaviors will do, with accuracy and confidence.

• CounterTack is the only solution architected on a Big Data platform that stores and manages more behavioral data than any other solutions – a necessity in detecting unknown threats. Other EDR solutions store data for weeks, some for only days. Average dwell time – the time between an initial compromise, lateral movement through the network and when a breach is fixed – is 229 days. CounterTack stores an unlimited amount of data for an unlimited amount of time.