+ All Categories
Home > Documents > MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security...

MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security...

Date post: 22-Sep-2020
Category:
Upload: others
View: 2 times
Download: 0 times
Share this document with a friend
28
MDATP in QIWI n
Transcript
Page 1: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037

MDATP in QIWI

n

Page 2: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037

Проблематика

• Проблема производительности

• Проблема восприятия пользователем

• Много агентов агентов на хосте

• Один агент может повлиять на работу другого

• Большое количество метрик контроля покрытия агентами хостов

• Проблема с управлением хостами

• Децентрализованное управление

• Проблема с консолидацией и корреляцией логов

• Не всегда есть возможность интеграции одного продукта в другой

Page 3: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037

Методология тестирования

Page 4: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 5: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 6: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 7: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 8: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037

Penetration test

Page 9: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037

Observe

Page 10: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037

Orient

Page 11: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037

Orient

Page 12: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 13: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 14: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 15: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 16: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 17: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037

Кроссплатформенность

Page 18: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 19: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 20: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 21: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037

Threat and vulnerability managment

Page 22: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 23: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 24: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 25: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 26: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 27: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037
Page 28: MDATP in QIWI - softline.ru … · Carbon Black Live Response CBLR- Kaspersky Endpoint Security KES- Windows Defender ATP WDATP- WDATP-T1031 WDATP-T1033 WDATP-T1035 WDATP-T1036 WDATP-T1037

Вопросы?


Recommended