EnCase Endpoint Security

Promote this Nomination

Additional Info

Company (that provides the nominated product / solution / service)Guidance Software
Company size (employees)100 to 499
Type of solutionSoftware

In 3 bullets, summarize why this product or service is different from the competition and deserves recognition:

1 - EnCase Endpoint Security exposes hidden risks and threats that can only be seen by visualizing the aggregate of all endpoint activity-related data across the enterprise. This ensures your ability to catch threats that evade perimeter defenses.

2 - EnCase Endpoint Security integrates with exsiting security-based alerting technologies to leverages the resources security teams already have in place by automating the validation and initial incident-response process, increasing productivity.

3 - EnCase Endpoint Security focuses on the locations with the most threats - endpoints - unlike other security tools that focus on net flows, packets, or log files.

Brief Overview

EnCase Endpoint Security provides conditional detection and embedded threat intelligence with a focus on automation. With this product, customers can rapidly detect hidden threats before they lead to a breach. Integrated threat intelligence adds a deeper layer of context to security alerts, including numeric threat scores that help incident response teams prioritize and respond to critical threats. Simple incident response control actions – including memory scans, IOC searches, and incident investigations – enable tier-one and tier-two security analysts the ability to quickly get to the heart of any incident.

EnCase Endpoint Security features an extremely simple UX/UI designed in standard HTML5 and JavaScript for efficiency, automation, and ease-of-use to reduce manual tasks and improve overall usage. Streamlined security workflows meet the needs of both tier-one security analysts and advanced incident responders. The product is designed to promote greater operational efficiencies by offering meaningful dashboards, process tree visualizations, customizations, shortcuts, and more. It also includes enhanced open APIs that expands the capacity to automate more processes involving third party security tools. Integration with various SIEM tools, like Splunk, allow customers to access EnCase Endpoint Security with a single-pane-of-glass user experience.