EnCase Endpoint Security Technical Overview
EnCase Endpoint Security is the industry leading EDR tool, and a go-to for incident responders. EnCase Endpoint Security detects known threats by ingesting blacklists, IOC’s and threat intelligence feeds, as well as unknown threats through endpoint behavior analysis. Once a threat is found, EnCase can be used to surgical remediate all iterations of a threat. EnCase automates the incident response by integrating with perimeter defense solutions as well as commonly used DFIR open source tools.