Written By David Shefter And Presented By Chuck Leaver
Recently we announced a cooperation with Microsoft that brings together Ziften’s Zenith ® systems and security operations platform, and Windows Defender Advanced Threat Protection (ATP) delivering a cloud-based, “single pane of glass” to spot, view, investigate, and respond to innovative cyber attacks and breaches on Windows, macOS, and Linux-based devices (desktops, laptop computers, servers, cloud, etc).
Windows Defender ATP plus Ziften Zenith is a security service that allows enterprise consumers to find, examine, respond and fix advanced risks on their networks, off-network, and in the data center and cloud.
Think of a single solution throughout all the devices in your enterprise, supplying scalable, state of the art security in an economical and easy to use platform. Enabling enterprises throughout the world to protect and manage devices through this ‘single pane of glass’ provides the promise of lower operational expenses with true boosted security providing real time global hazard protection with info collected from billions of devices worldwide.
The Architecture Of Microsoft And Ziften
The image below provides an introduction of the service elements and integration struck between Windows Defender ATP and Ziften Zenith.
Endpoint investigation capabilities allow you to drill down into security signals and understand the scope and nature of a prospective breach. You can submit files for deep analysis, receive the outcomes and take action without leaving the Windows Defender ATP console.
Spot and Contain Threats
With the Windows Defender ATP and Ziften Zenith integration, organizations can easily discover and contain risks on Windows, macOS, and Linux systems from an individual console. Windows Defender ATP and Ziften Zenith offer:
Behavior-based, cloud-powered, sophisticated attack detection. Find the attacks that make it past all other defenses (post breach detection).
Rich timeline for forensic investigation and mitigation. Easily investigate the scope of any breach or suspected behaviors on any machine through a rich, 6-month machine timeline.
Built in special hazard intelligence knowledge base. Threat intelligence to quickly find attacks based upon tracking and data from millions of devices.
The diagram below illustrates a lot of the macOS and Linux hazard detection and response abilities now offered with Windows Defender ATP.
In conclusion, if you’re planning to protect your endpoints and infrastructure, you need to take a hard look at Windows Defender ATP and Ziften Zenith.