Response actions though EDR Optimum include isolating an endpoint with potential malware or quarantining a suspicious file. Its verdict can then be further enriched with analytics on the file performed by Kaspersky EDR Optimum. If Kaspersky Endpoint Security for Business finds a suspicious file it cannot definitively categorize as malicious, it sends it to Kaspersky Sandbox, which automatically runs the risky file in an isolated environment to make it reveal its malicious behavior or character. It provides the visibility that shows them what happened and what they can do about it, and it provides an automated response around indicators of specific threats.” It’s aimed at administrators rather than at SOC analysts. It doesn’t give as much information as Threat Management and Defense, but it does give root cause analysis to see if there are any configuration changes that can better mitigate or prevent bad things from happening. EDR Optimum is not less effective, but it has a lot of automation built into it.

“EDR Optimum is a brand new offering which is completely different in terms of the target market, and the degree of skill required to manage it. “Unlike Threat Management and Defense, which was a brand new best-in-class offering around the high end segment of the market, this is an enhancement of our traditional Endpoint Security for Business,” said Rob Cataldo, Managing Director for Kaspersky North America. Kaspersky Threat Management and Defense is aimed at the higher end of the market, which has sophisticated SOC management capabilities that can leverage the tool’s full capabilities, Kaspersky EDR Optimum is aimed at a different part of the market. That is a very different kind of solution, however. Kaspersky already serves the EDR market with their Kaspersky Threat Management and Defense solution, which they introduced in 2018. It enhances Endpoint Security for Business with Cloud Management Console, with two new solutions, Kaspersky Endpoint Detection and Response Optimum solution, and Kaspersky Sandbox. Kaspersky has extended their Kaspersky Endpoint Security for Business solution with a new bundled offering, Kaspersky Integrated Endpoint Security. Rob Cataldo, Managing Director for Kaspersky North America

Kaspersky edr