Trellix

Trellix

Trellix (formerly McAfee) Advanced Threat Defense

Trellix (formerly McAfee) Advanced Threat Defense effectively leverages multiple detection technologies such as antivirus signatures, file reputation, emulation (Gateway Anti Malware) and Box to combat sophisticated malware.
In addition, by seamlessly linking with other Trellix (former McAfee) products such as IPS/IDS products and Web Gateway products, we provide a comprehensive solution that not only detects malware but also prevents unauthorized communication in real time.

Trellix (formerly McAfee) Advanced Threat Defense

*ATD: Trellix (formerly McAfee) Advanced Threat Defense
*NSP: Trellix (formerly McAfee) Network Security Platform
*ePO: Trellix (formerly McAfee) ePolicy Orchestrator

real time down selector

The "Down Selector" engine analyzes the target file before the "Box Engine".
Since the "down selector" engine executes malware analysis processing at high speed, it realizes real-time response and reduces the load by not performing processing in the "Box engine".

* It is possible to set the files detected by the "down selector" engine to be analyzed by the "advanced Box" engine.
 

real time down selector

Advanced Box

Perform static code analysis in addition to dynamic analysis based on execution behavior

real time down selector

Analysis by custom image

  • Perform dynamic analysis in the same terminal environment (OS version, service pack/patch level, application used, etc.) as the one actually used
    • Improving the detection rate of targeted malware created to operate only in the target's specific environment
    • In order to avoid high load caused by processing on multiple OSs other than the user environment, analysis is performed only on the OS of the user environment to improve the efficiency and speed of processing.
Analysis by custom image

Analysis result report (sample)

Analysis result report
Analysis result report
Analysis result report

Inquiry/Document request

In charge of Macnica Trellix Co., Ltd.

  • TEL:045-476-2010

Mon-Fri 8:45-17:30