TMCnet News

SentinelOne Frees Enterprises from Ransomware
[November 18, 2015]

SentinelOne Frees Enterprises from Ransomware


SentinelOne, the company that's transforming security with a next-generation antivirus replacement solution, today announced a new version of its Endpoint Protection Platform (EPP) which protects organizations from becoming victims of advanced malware and exploit-based attacks, including ransomware like CryptoWall.

In June, an FBI notice identified CryptoWall as the most common form of ransomware affecting individuals and businesses in the US. The Bureau said it had received 992 complaints related to CryptoWall between April 2014 and June 2015 with losses totaling $18 million. The agency also warned that companies may not be able to get their data back following an infection without paying a ransom. As a result, many businesses must resort to paying criminals to regain access to critical files. Afterwards, they also face the painstaking process of trying to remediate systems altered during the course of the attack. SentinelOne can now make organizations immune to both of these damaging effects.

Click to Tweet: .@SentinelSec frees enterprises from #ransomware http://bit.ly/1OebV5M

"With eight offices in the US and China handling confidential information for clients in the venture capital and emerging technology sectors, protecting devices from malware and advanced attacks is a top priority for us," said Peter G. Basil, Director of Information Technology for Gunderson Dettmer, the world's leading business law firm serving the venture capital and emerging growth marketplace. "SentinelOne EPP is a critical layer in our defense against ransomware, saving us untold amounts of time and money in lost productivity and cean-up operations. Based on its ability to protect against both known and zero day threats, we can replace our antivirus suite with SentinelOne and get full protection without paying for two products."



Giving Businesses the Upper Hand over Attackers

SentinelOne EPP uses real-time execution monitoring and analysis to pinpoint malicious behaviors. Regardless of the attack method used, once malicious code executes, whether on disk or in memory, SentinelOne immediately detects the attack and automatically takes mitigation and containment actions to eliminate the threat. For example, it can be configured to automatically remove an endpoint from the network, terminate a malicious process, quarantine malware, and delete malicious code altogether to prevent it from infecting other devices.


To accelerate and automate remediation processes, SentinelOne now offers the following new features:

  • Patent-pending Dynamic Remediation and "Rollback" that immediately restores deleted or modified system files to a state prior to the attack. This eliminates the need for costly clean up operations and greatly accelerates time to remediation.
  • Increased visibility into attacks with real-time endpoint forensics presented through a unique storyline view of malware activity on an endpoint, including pinpointing what parts of the system were directly affected. This forensic intelligence is available to security administrators in real-time allowing them to analyze attack techniques using a high level graphical view that provides drill down access to specific activity data.

"Unfortunately, as we predicted last year, the number of ransomware incidents targeting organizations, rather than consumers, has spiked significantly in 2015. These attacks can cripple a business, impose significant financial losses and take days to clean up," said Tomer Weingarten, CEO of SentinelOne. "SentinelOne EPP dynamically adapts to polymorphic and previously unknown malware used by ransomware. This allows us to detect and kill malicious processes, quarantine an affected endpoint to prevent any lateral spread, and rollback compromised systems to their pre-attack state to minimize downtime and lost productivity."

Availability
This latest version of SentinelOne's Endpoint Protection Platform (EPP) that includes new Endpoint Detection and Response (EDR) capabilities, including Dynamic Remediation and Rollback, is available immediately from SentinelOne and its business partners.

About SentinelOne
SentinelOne has developed a next-generation antivirus replacement platform that protects organizations against advanced threats initiated by nation states, terrorists, and organized crime. The company uses dynamic execution inspection to detect and protect devices against targeted, zero day threats in real time. SentinelOne was formed by an elite team of cyber security and defense experts from IBM, Intel (News - Alert), Check Point, McAfee, Palo Alto Networks and the Israel Defense Forces. The company's investors include Third Point Ventures, Data Collective, Granite Hill Capital Partners, Tiger Global Management and The Westly Group. To learn more visit sentinelone.com or follow us at @SentinelSec


[ Back To TMCnet.com's Homepage ]