Integration enables customers to detect, view, investigate, and respond to advanced cyber-attacks on macOS and Linux-based endpoints in the Windows Defender ATP Console
Even the best endpoint defenses, including those for desktops, laptops, servers, and VMs can be breached, as cyberattacks become more sophisticated and targeted. Ziften has announced a strategic business and technology collaboration with Microsoft. The collaboration brings together Ziften’s Zenith systems and security operations platform, and Windows Defender Advanced Threat Protection delivering a cloud-based, “single pane of glass” to detect, view, investigate, and respond to advanced cyber-attacks and breaches on Windows, macOS and Linux-based endpoints.
Together, Ziften and Microsoft help organizations speed detection of attacks and zero-day exploits, uncover the full scope of a breach, quickly respond to contain attacks and prevent recurrence, and as a result, increase overall security operations productivity. The integrated, cloud-powered approach supports the most highly complex multi-system, multi-cloud enterprise environments, giving business, government, and MSP customers the capability to:
- Extend Windows Defender ATP to macOS and Linux Systems: Customers can easily extend post-breach detection, investigation, and response to any asset, anywhere – client devices, servers, and cloud VMs – whether on-network or remote; connected or not. They get an integrated “single pane of glass” supporting Windows, macOS, and Linux-based systems.
- Secure Multi-Cloud, Windows and Linux-Based Environments: Organizations can readily overcome cloud monitoring and security concerns with visibility and control of all virtual operating systems deployed across any cloud service provider.
- Conduct 6 Month, Lookback Forensic Investigations: Customers can instantaneously search 6 months of rich machine timeline unifying security events from Windows, macOS, and Linux-based systems – both physical and virtual.
“Available in preview, Ziften enables Windows Defender ATP customers to extend their ATP service to non-Windows endpoints by deeply integrating Ziften’s solution for Mac and Linux into Windows Security Center”, said Moti Gindi, General Manager Windows Cyber Defense, Microsoft. “This provides Sec-ops holistic protection and visibility across their Windows and non-Windows clients and ensures they can quickly and accurately detect, investigate and responds to attacks across their entire install base.”
“We are pleased to partner with Microsoft to solve customer’s post-breach security challenges across their entire systems environments, including mixed endpoint, and cloud infrastructures,”
said Chuck Leaver, CEO of Ziften. “Ziften’s always-on, cloud-connected security approach gives customers a faster, more efficient way to recognize and respond in real-time to attacks and breaches on their devices, anywhere, anytime. Security operations teams expect the best, but prepare for the worst, and this collaboration between Ziften and Microsoft gives customers the ability that when threat prevention fails, they have the ability to detect and stop the threat.”
About Ziften:
Ziften delivers all-the-time visibility and control for any asset, anywhere – client devices, servers, and cloud VMs – whether on-network or remote; connected or not. Our unified systems and security operations (SysSecOps) platform empowers IT and security operations teams to quickly repair user impacting endpoint issues, reduce their overall risk posture, speed security threat response, and increase operations productivity. Ziften’s secure architecture delivers continuous, streaming endpoint monitoring and historical data collection for large and mid-sized enterprises, governments, and managed security service providers (MSSP). And Ziften helps extend the value of incumbent tools, and fill the gaps between fragmented, siloed systems. https:/ziften.com
