{"id":58888,"date":"2023-10-03T17:26:53","date_gmt":"2023-10-03T09:26:53","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=58888"},"modified":"2023-10-03T17:26:56","modified_gmt":"2023-10-03T09:26:56","slug":"sophos-excels-in-mitre-engenuity-attck-evaluations-with-99-detection-coverage","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2023\/10\/03\/sophos-excels-in-mitre-engenuity-attck-evaluations-with-99-detection-coverage\/","title":{"rendered":"Sophos excels in MITRE Engenuity ATT&CK Evaluations with 99% detection coverage"},"content":{"rendered":"\n

Sophos<\/a>, a global leader in innovating and delivering cybersecurity as a service, recently announced its strong results in the MITRE Engenuity ATT&CK Evaluations. Sophos Intercept X with XDR detected 99% of the adversary behaviors in the evaluation, reporting 141 out of 143 adversary attack steps.\u00a0<\/strong><\/p>\n\n\n\n

Sophos Intercept X with XDR excelled in the independent ATT&CK Evaluations with its comprehensive EDR and XDR capabilities that deliver actionable context on the \u201cwhat,\u201d \u201cwhy\u201d and \u201chow\u201d of attacker behaviors. In addition, Sophos Intercept X with XDR recorded rich analytic data on 98% of the substeps in the ATT&CK Evaluations.<\/p>\n\n\n\n

\u201cAs active adversaries continue to prey upon the unprepared, good cybersecurity outcomes increasingly depend upon competent technologies in the hands of skilled operators. MITRE\u2019s evaluation is a powerful objective measurement of a technology\u2019s ability to produce the fundamental observations and classifications needed to effectively identify and defend against attackers,\u201d said Joe Levy, president and chief technology officer at Sophos. \u201cSophos meticulously architects its solutions for security operators, empowering them with superior protection, detection and response capabilities for known and unknown threats before they become full-blown, destructive attacks, and we believe MITRE\u2019s evaluation results demonstrate the robustness of Sophos\u2019 real-world security capabilities.\u201d\u00a0\u00a0<\/p>\n\n\n\n

This round of independent ATT&CK Evaluations evaluated the abilities of 30 vendors in detecting and analyzing attack tactics, techniques and procedures (TTPs) of Turla<\/a>, a known Russia-based threat group. Turla leverages novel TTPs and custom tooling to evade security defenses, and was chosen as the evaluation adversary based on its innovative stealthy maneuvers; targeted sectors, including government, critical infrastructure, education, and more; and breadth of open-source reporting on its tradecraft.<\/p>\n\n\n\n

<\/a>\u201cTurla is one of the most sophisticated threat actors, and their tradecraft is platform diverse, dynamic in stealth, and layered in persistence,\u201d said Amy Robertson, MITRE cyber threat intelligence lead, ATT&CK Evals. \u201cThis round provides an emulation that focused on kernel and service-level operations that often run with the same permissions as detection and protection products. Our goal is to empower end users and purchasers with unbiased insights into the product capabilities that detect these advanced adversary behaviors, while also collaborating with the participating vendors to evolve their products.\u201d  <\/p>\n\n\n\n

Sophos Intercept X with XDR combines active adversary mitigations \u2013 including industry-first Adaptive Attack Protection that immediately activates heightened defenses when a hands-on-keyboard attack is detected, stopping the attack and providing defenders valuable additional time to respond; anti-ransomware technology; deep learning artificial intelligence; and exploit prevention to prevent and stop attacks. It is powered by\u00a0Sophos X-Ops\u00a0threat intelligence, a cross-operational task force of more than 500 security experts within SophosLabs, Sophos SecOps and SophosAI.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

Sophos Intercept X with XDR excelled in the independent ATT&CK Evaluations with its comprehensive EDR and XDR capabilities that deliver actionable context on the \u201cwhat,\u201d \u201cwhy\u201d and \u201chow\u201d of attacker behaviors. In addition, Sophos Intercept X with XDR recorded rich analytic data on 98% of the substeps in the ATT&CK Evaluations.<\/p>\n","protected":false},"author":6,"featured_media":46775,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[206,96,2727,1656],"class_list":["post-58888","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","tag-sophos","tag-technology","tag-technology-adaption","tag-technology-investment"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/58888","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=58888"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/58888\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/46775"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=58888"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=58888"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=58888"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}