Desktop Consulting and Support Services

Progent's Active Security Monitoring services include behavior analysis heuristics from SentinelOne to offer best-in-class defense for all endpoints as well as servers. This modern approach to malware protection is designed to meet the latest wave of cyber attacks, such as ransomware, which routinely avoid detection by conventional signature-matching anti-virus technology. Progent is a SentinelOne Partner, reseller, and integrator.

Progent's Active Security Monitoring offers small and medium-sized companies the advantages of the same anti-virus tools implemented by some of the world's biggest corporations such as Netflix, Visa, and NASDAQ. By delivering real-time malware blocking, detection, containment, restoration and analysis in one integrated platform, ProSight Active Security Monitoring cuts TCO, simplifies management, and expedites resumption of operations. The next-generation endpoint protection engine built into in Progent's ProSight ASM was ranked by Gartner Group as the industry's "most visionary Endpoint Protection Platform (EPP)."

ProSight ASM remote services utilize a low-profile software agent loaded on each protected device to form a dynamic cybersecurity grid that responds to potential malware in real time and orchestrates unified defense featuring:

• Real-time protection for Windows, macOS, Linux, Apple iOS and Google Android machines
• Protection for virtual machines running Windows Hyper-V, vSphere, and Citrix XenServer virtualization platforms
• In-depth OS-level monitoring
• Signature-independent heuristics and automation
• Modern behavioral analysis
• Ability to spot new generation threats from all vectors
• Automated post-attack remediation
• Single-click rollback to last secure state following a crypto-ransomware assault including Ryuk, Maze, Sodinokibi, DopplePaymer, Snatch or Egregor
• Immediate and automatic immunization across the complete matrix of protected machines
• Real-time display of an assault's path through your system
• Comprehensive forensics for identifying vulnerabilities
• Centralized web-accessible administration tool
• Compliant with HIPAA and PCI

Progent's ProSight Active Security Monitoring and Today's Cybersecurity Landscape
Most crypto-ransomware break-ins could have been prevented by current security tools. Unfortunately, some attacks will succeed despite the most well-planned protective measures. Today's cybersecurity landscape is too crowded with tireless bad actors, including state-funded cyber criminals, for any organization to consider itself impregnable. Given this reality, Progent's Active Security Monitoring is intended not simply to prevent ransomware from gaining access to your information network, but also to react powerfully to any breach. This includes immediate quarantine of compromised devices, AI-based threat removal, machine-speed immunization of all machines by means of embedded agents, one-click restore to a safe condition and extensive forensic analysis to help you understand how to bolster your security defense to foil subsequent assaults. By delivering leading-edge defenses during all phases of a cyber assault, Progent's ProSight Active Security Monitoring offers a comprehensive solution for dealing with the increasingly dangerous cybersecurity landscape and avoiding the financial and reputation loss associated with a major security breach.

Endpoint devices such as desktops, notebooks and phones are the most vulnerable and most typically attacked elements of an information system. ProSight ASM services provide a single endpoint protection (EPP) platform to manage the complete lifecycle of a cyber assault including blocking, classification, containment, recovery and analytics. Malware attacks recognized by Progent's Active Security Monitoring include:

• File-dependent attacks such as ransomware, trojans, and payload-based assaults
• File-less and memory-only malware with no disk-resident flags
• Document-carried attacks incorporated within macros and Microsoft Office and Adobe files
• Phishing email-based assaults which are responsible for a high percentage of cybersecurity break-ins
• Browser-delivered assaults embedded in inadvertent downloads, Flash, JavaScript, VBS, html5, and plug-ins
• Real-time attacks from scripts such as PowerShell, Powersploit, and VBS
• Credential-centric assaults such as credential-dumping, and mimikatz

Next-generation anti-virus tools reinforce traditional signature matching with behavior analysis. This technique examines the actions of a possible threat and decides if the activity is normal and innocuous or unusual and potentially threatening. For instance, does the code in question impact an unusually large set of processes? Does it alter the registry? Does it save keystrokes? Essentially, behavior monitoring focuses on potentially dangerous actions instead of on a fixed digital signature, which a cyber criminal can quickly nullify simply by modifying a few inconsequential bytes of malware code.

Prevention: Before the Breach
New threats are being developed quickly enough to swamp the capacity of signature-style anti-virus labs. The industry began to recognize the limitations of signature-matching EPP around 2012. Since that time the situation has become worse.

Progent's ProSight ASM utilizes intelligent cloud-hosted AV centers and whitelisting/blacklisting services from leading providers to stop recognized threats. This added to deep file inspection and dynamic blacklisting and whitelisting give ProSight ASM an advantage over old-school AV solutions. However, blocking is only the initial line of next-generation AV defense. Modern attacks, file-less and script-based assaults easily evade signature-matching systems. For example, hackers often employ a so-called packing technique to camouflage a malicious file's format so security researchers and anti-virus software can't detect the attack.

Recognition and Mitigation: During the Attack
The second part of the endpoint protection process involves reacting to a cyber attack while the malware code is executing following a breach. ProSight ASM uses next-generation endpoint protection techniques to detect malicious activity resulting from any attack that breaks through the initial wall of defense. In order to modify information, even file-less threats like memory-resident malware perform recognizable behaviors like as creating an executable file with no authorization. Progent's ASM's small-footprint embedded agent tracks activity in every enrolled device and utilizes advanced behavioral analysis and deep execution background to detect new assaults immediately after they occur. When an assault is detected, Progent's ProSight Active Security Monitoring immediately quarantines the impacted endpoint from the network to minimize the damage. Because the Progent's Active Security Monitoring software agent operates independently, endpoints stay secured even if they are detached from the Internet.

Cleanup: After a Penetration
After containing an assault, Progent's Active Security Monitoring starts the cleanup phase of protection. When Progent's ProSight ASM is implemented with Microsoft Windows Volume Shadow Copy Service, changes to data caused by a cyber attack can be automatically returned to a trusted condition with a single click. Progent's ASM also records any system files and configurations that were altered by the malware and what files were recovered. Whenever Progent's ProSight ASM uncovers a recent malicious binary, the code is flagged and any machines on the grid that are running embedded ProSight ASM agents are vaccinated against the latest attack. Also, the Progent's ProSight ASM management tool offers extensive forensics like an intuitive display of the attack's storyline across the targeted network from start to finish. This audit trail of how an attack travelled through the network helps your IT staff to evaluate the impact and highlights gaps in security policies or work habits that should be corrected to prevent future break-ins.

Download the ProSight ASM Datasheet
To download a PDF datasheet about the major features and benefits of Progent's ProSight ASM services, click:
ProSight Active Security Monitoring Ransomware Protection Services Datasheet. (PDF - 89 KB)

Contact Progent about ProSight Active Security Monitoring Services
To learn more information about ways Progent can help you set up an affordable and efficient ransomware defense solution with ProSight ASM service, call 1-800-462-8800 or see Contact Progent.