Inspect

ESET Inspect shows you what happened in your network – it does not stop the attack itself.

Description

Many incidents only come to light once the damage is done. Then the questions start: how did the malware get in, which files did it touch, which machines are affected? ESET Inspect is an investigation tool, not a replacement for endpoint protection. Prevention is handled by the ESET PROTECT PLATFORM solutions; Inspect provides visibility across clients, servers and email.

ESET Inspect raises ESET PROTECT PLATFORM to XDR level. A rule-based detection engine looks for signs of an attack and raises detections at defined severity levels; the system builds incidents from the mass of events. Suspicious files can go to the ESET LiveGuard Advanced cloud sandbox.

The solution is delivered from the cloud and runs on Windows and macOS machines.

What is included

• Cross-platform coverage – runs on Windows and macOS
• Public API – for integration with SIEM, SOAR and ticketing tools
• Simple, secure remote access – close to real time, no third-party tools required
• MITRE ATT&CK – detections mapped to known attack techniques
• Interactive behavioural analysis – suspicious files go to the cloud sandbox with a report
• Automatic incident creation – large volumes of data correlated into incidents
• Reputation-based detection – real-time feedback from the global ESET LiveGrid reputation system

Who it is for

Organisations with their own security team that want to investigate incidents rather than just receive alerts – for example new ransomware strains, fileless attacks, zero days and APTs. It also fits a security operations centre that receives a threat warning and needs to know what to do next. If you are only looking for protection for workstations, you do not need this product.

Good to know

• Scope – Inspect does not protect on its own; prevention must be in place
• Availability – available as an add-on in all bundles; ESET PROTECT Elite already includes it
• Licensing per device and term
• Renewal through the renewal product of the same name.

All prices net plus 19% VAT.