Name: NetWitness Endpoint
Author: RSA Security

Help Desk

Web and Video Conferencing

Customer Support

Mind Mapping

Mobile App Development

Push Notifications

Development

Audit

Business Intelligence (BI)

Calibration Management

Collaboration

Embedded Business Intelligence (BI)

Org Chart

Procurement

Enterprise

Accounting

Finance and Accounting

Applicant Tracking

Corporate Learning Management

Credentialing

HR Management

Payroll

Professional Employer Organizations (PEO)

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

C/C++ Integrated Development Environments

Cloud Storage

Compliance Consulting

Cybersecurity Consulting

Data Virtualization

Dynamic Application Security Testing (DAST)

Electronic Data Interchange (EDI)

Fraud Detection

HTML Editors

IT Service Management (ITSM)

Identity Management

Infrastructure-as-Code (IaC)

Integration Platform as a Service (iPaaS)

Managed Print

Network Performance Monitoring

Password Management System

Relational Databases

Remote Monitoring and Management

Software Defined Networking (SDN)

Traffic Switching

Virtual Private Network (VPN)

Virtualization Management

Voice Recognition

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Consumer Ratings & Reviews

Content Management

Email Marketing

Heatmap and Session Recording

Landing Page

Marketing Automation

Marketing Resource Management

Mobile Marketing

Presentation

Social Login

Social Media Management

Survey & Forms Building

Video Streaming

Web Analytics

Marketing

Project Management

Professional Services

Customer Relationship Management (CRM)

Sales

Antivirus

User and Entity Behavior Analytics (UEBA)

Security

Auto Repair

Equation Editors

Insurance Agency Management

Legal Research

Library Management

OSS/BSS (Operations Support/Business Support)

Real Estate Property Management

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

LogRhythm NextGen SIEM Platform

LogRhythm

CrowdStrike Falcon

CrowdStrike

Watchguard Endpoint Security

WatchGuard Technologies

Microsoft Defender for Endpoint

Microsoft

Sophos Intercept X

Sophos

ESET PROTECT

ESET

Symantec Endpoint Security

Broadcom

Bitdefender GravityZone

Bitdefender

Kaspersky Endpoint Security

Kaspersky Lab

FortiClient

Fortinet

NetWitness Endpoint is an endpoint detection and response (EDR) solution designed to provide deep visibility into the security state of endpoints. According to the vendor, this solution is primarily targeted at small, medium, and large enterprises and is used by IT Security Managers, Security Analysts, Incident Response Teams, as well as professionals in the Financial Services and Healthcare industries.

## Key Features

**Endpoint detection and response (EDR)**: NetWitness Endpoint monitors activity across all endpoints, providing deep visibility into their security state. According to the vendor, it prioritizes alerts for new and non-malware attacks, aiming to reduce dwell time and improve incident response.

**Empowers security teams**: According to the vendor, NetWitness Endpoint provides critical data for understanding the breadth of an attack and enables effective forensic investigations.

**Reduces attack dwell time**: The solution performs fast root cause analysis, aiming to prioritize threats and minimize dwell time. According to the vendor, it aims to improve security analysts' efficiency and accelerate time-to-response.

**Detects all endpoint threats**: NetWitness Endpoint aims to identify threats that other solutions may miss, providing real-time visibility of all endpoints, whether they are on or off the network.

**Simplifies endpoint data collection**: The solution offers endpoint inventory scans and can be paired with Microsoft Windows log forwarding and filtering capabilities, according to the vendor.

**Combines continuous endpoint security monitoring with behavior-based detection**: NetWitness Endpoint aims to deliver full visibility into processes, executables, events, and behavior on all endpoints, including servers, desktops, laptops, and virtual machines. According to the vendor, it enables better management of the attack lifecycle and incident response investigations.

**Rapid data collection**: The solution aims to collect full endpoint inventories and profiles in minutes with minimal impact on end-user productivity. According to the vendor, it uses a lightweight endpoint agent and provides immediate insights, response actions, and metadata ingestion from Windows logs and endpoint core processes.

**Scalable and efficient solution**: NetWitness Endpoint provides a single, tamper-proof agent and aims to scale easily from hundreds to hundreds of thousands of endpoints. According to the vendor, most analysis occurs on the NetWitness Endpoint database, aiming to reduce endpoint impact.

**Integrated behavior-based detection**: The solution includes embedded endpoint-based UEBA (User and Entity Behavior Analytics) that aims to create a baseline for normal endpoint behavior. According to the vendor, it rapidly detects deviations that may indicate a threat, scores and prioritizes incidents based on potential threat level, and uses advanced machine learning algorithms.

**Intelligent and automated processes**: NetWitness Endpoint aims to automatically collect and analyze endpoint processes and executables, record data about every critical action surrounding unknown items, and apply advanced analysis to determine threat potential impact and prioritization.

NetWitness Endpoint monitors activity across endpoints—on and off the network—providing deep visibility into their security state, and it prioritizes alerts when there is an issue. NetWitness Endpoint aims to reduce dwell time by rapidly detecting new and non-malware attacks that other EDR solutions miss, and it cuts the cost, time and scope of incident response.

Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.

Standalone

Academic

CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no performance impact, no additional agents, hardware, scheduled scans, firewall exceptions or admin credentials.

Falcon Pro

Falcon Enterprise

Falcon Go (Small Business)

NetWitness Endpoint

Endpoint Security

RSA Security

Endpoint security software protects enterprise connected devices from malware and cyber attacks.

Anti-Exploit Technology

In-memory and application layer attack blocking (e.g. ransomeware)

Endpoint Detection and Response (EDR)

Continuous monitoring and response to advanced internet threats by endpoint agents.

Centralized Management

Centralized management supporting multi-factor authentication, customized views, and role-based access control.

Hybrid Deployment Support

Administrators should be able to choose endpoint security on-premise, cloud, or hybrid.

Infection Remediation

Capability to quarantine infected endpoint and terminate malicious processes.

Vulnerability Management

Malware Detection

Detection and blocking of zero-day file and fileless malware.

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Home

Endpoint Security Software

NetWitness Endpoint

Overview

What is NetWitness Endpoint?