my page
Sign InSign Up
언어 선택

No recent searches

HOME
Products
AhnLab Connect PLUS
XDR

AhnLab XDR

The Evolution of
Threat Detection and Response

Read BrochureContact Sales

AhnLab XDR is an AI-powered, SaaS-delivered platform that provides granular threat detection, precise risk identification, contextual analysis and optimal response to help customers prioritize and manage cyber risks.

Why AhnLab XDR

Cyber Risk Management
Simplified by AI-Powered XDR

Precise Risk Identification

AhnLab XDR performs around-the-clock monitoring of enterprise users and their assets. Continuous monitoring is followed by correlation analysis into the entity and user/device behaviors, leading to precise risk identification with a clear understanding of its impact and context.

01

Orchestrated Response

AhnLab XDR ingests logs from native and third-party products and conducts a full-historical analysis to enrich and contextualize the data. This allows customers to perform orchestrated incident response by leveraging the security features of seamlessly integrated products.

02

Better Security Efficiency

Our SaaS-delivered XDR guarantees better operational efficiency and minimal performance impact with our agentless log collection. Furthermore, the smooth integration with our best-in-class threat intelligence platform empowers customers with actionable insights into the latest cyber threats.

03

MXDR Expert Analysis Service

AhnLab XDR requires security expertise across various domains such as endpoints, networks, email, and more. Through our dedicated MXDR service, AhnLab provides expert-led analysis of security incidents and log correlation. This enables rapid and accurate incident investigation, minimizing threats effectively.

04

Key Features

Intuitive Risk Scoring Makes Cyber Security Easier

Risk Scoring

AhnLab XDR normalizes the ingested data and performs a contextual analysis thanks to our AI and machine learning technologies. The outcome of AI-assisted analysis is presented as the intuitive company-wide risk score that allows users to prioritize risks and build a robust threat response strategy.

Up-to-date Scenario Rules

AhnLab XDR is armed with up-to-date scenario rules that predefine well-known and latest risk scenarios. The platform ensures real-time rule updates to help users always stay response-ready.

Optimized Log Collection and Threat Response

Interoperating with our EPP and EDR, AhnLab XDR aggregates a large volume of user/asset data and enriches it for an optimal response. The data acquisition from “AhnLab Data Hub” where all ingested data from security tools reside, makes the data ingestion process completely agentless.

Threat Intelligence based Monitoring

Integration with AhnLab TIP empowers AhnLab XDR to perform threat intelligence-based monitoring that enables users to take an immediate response action by better understanding the latest IOCs and their potential impact. Users can also enjoy the rich content from AhnLab TIP, such as news clipping and security advisory.

Dashboard

Consolidated Management of Company-wide Risks

2403132975633941.png

AhnLab XDR dashboard displays the real-time-state risk level of the organization and user/asset impact through the “Risk Score”. The user and asset risks are categorized into the five risk factors, and details of each factor can be found in “Risk Details”.

The dashboard also graphically visualizes the risk severity of logs and events collected over the last 30 days with providing the status of “top 5 risks”, “newly identified risks”, “risks being addressed”, “resolved risks”, “newly identified or unidentified users”, and “flagged assets”. Moreover, AhnLab TIP integration enables AhnLab XDR to deliver rich content including the latest security news and IOCs.

From the dashboard, you can check:

  • Risk Score: Company-wide risk score and status of impacted users/devices
  • Risk Status: Risks newly identified, being addressed or resolved within last 30 days
  • New Risks: The recent top 5 risks
  • Flagged Asset: The status and details of assets that should be monitored
  • Threat Intelligence: Internal impact of IOCs and related content

Solution

Complete Coverage of Threat Detection and Response

Proven Cross-Domain Detection & Response Capabilities

2601077649200110.png

100% Protections! MITRE ATT&CK Eval Round 7

AhnLab achieved 100% protection in MITRE ATT&CK Evaluation Round 7. Our rock-solid defense was powered by contextualized and accurate detection across on-premise and cloud environments.

MITRE ATT&CK Evaluation Round 7

Resources

FAQs

Frequently Asked Questions

AhnLab XDR is an AI-powered, SaaS-delivered platform that collects and analyzes logs from various systems and helps customers prioritize and manage cyber risks. Powered by artificial intelligence and machine learning technology, AhnLab XDR integrates and normalizes logs from heterogeneous products and performs user/asset-based risk analysis, ultimately allowing customers to upgrade their security with an optimal response capability.

With AhnLab XDR, customers can precisely identify and prioritize risks based on the risk score. For the risk that needs to be addressed, seamlessly integrated security products offer optimized response measures. All in all, the benefits of AhnLab XDR truly matter as it essentially improves an organization’s level of security as well as operational efficiency.
AhnLab XDR is a cloud-hosted platform, and it is also integrated with AhnLab TIP, our cloud-based threat intelligence platform. Essentially, AhnLab XDR analyzes logs and events from multiple security domains, including endpoint, network, email, and “cloud”. Given the platform’s characteristics, operating AhnLab XDR in an on-premise or air-gapped environment is possible but not recommended.
AhnLab XDR requires AhnLab V3, AhnLab EPP, and AhnLab EDR to effectively procure the data generated by users and their assets.