Overview

EnCase Endpoint Security provides conditional detection and embedded threat intelligence with a focus on automation. With this product, customers can rapidly detect hidden threats before they lead to a breach. Integrated threat intelligence adds a deeper layer of context to security alerts, including numeric threat scores that help incident response teams prioritize and respond to critical threats. Simple incident response control actions – including memory scans, IOC searches, and incident investigations – enable tier-one and tier-two security analysts the ability to quickly get to the heart of any incident.

EnCase Endpoint Security features an extremely simple UX/UI designed in standard HTML5 and JavaScript for efficiency, automation, and ease-of-use to reduce manual tasks and improve overall usage. Streamlined security workflows meet the needs of both tier-one security analysts and advanced incident responders. The product is designed to promote greater operational efficiencies by offering meaningful dashboards, process tree visualizations, customizations, shortcuts, and more. It also includes enhanced open APIs that expands the capacity to automate more processes involving third party security tools. Integration with various SIEM tools, like Splunk, allow customers to access EnCase Endpoint Security with a single-pane-of-glass user experience.