Claroty Module Advanced Anomaly & Threat Detection - subscription license (4 years) - 1 device

The Advanced Anomaly & Threat Detection module enables healthcare organizations to customize their threat detection strategy unique to their organizational risk tolerance while adding a deeper level of continuous threat monitoring that is both clinically and contextually aware.

With continuous monitoring of your entire clinical environment for the earliest indicators of compromise for both known and emerging threats, healthcare organizations can reveal immediate visibility of potential risks across the entire attack chain, while optimizing response efforts across existing security tools and workflows.

In addition to anomalous behavior identification and alerting, the Advanced Anomaly & Threat Detection provides further depth to the Medigate Platform's customizable alerting engine through an expanded set of customizable alerting mechanisms such as device communications, device change alerting, and more.

Signature-based detection greatly expands the Medigate Platform's toolset for detecting, understanding, and responding to threats based on known signatures and IoCs. With signature content directly available for viewing within the platform for investigation purposes, users can easily enable/disable each signature as needed in order to properly tune the system.

Lastly, the Medigate Platform's threat detection capabilities now align with the MITRE ATT&CK Enterprise framework. Alerts can be mapped to various tactics and techniques as a known industry standard. With this further context and remediation information, responders can now better understand and align to goals to swiftly and appropriately respond to malicious actors.