Taegis NDR Detectors
Note
Taegis NDR is an evolution of iSensor, but with a new name and soon with expanded capabilities. You may see some references to the iSensor branding as we complete this transition.
Taegis™ NDR is a Network IDS/IPS solution that can be deployed as either a virtual or physical appliance within your network. It leverages Secureworks proprietary signatures to detect and prevent network-based threats in real-time. In addition, the NDR Device automatically downloads Secureworks curated Threat Indicators (IP addresses and Domains) to identify malicious connections as they occur on your network. NDR is a separately contracted feature that may be included with Secureworks® Taegis™ ManagedXDR.
The NDR Device also continuously collects network telemetry that may be used in the following detectors:
- Domain Generation Algorithms
- Rare Program to Rare IP
- Stolen Credentials
- Tactic Graphs™ Detector
- Punycode Detector
- IP Watchlist
- Domain Watchlist
MITRE ATT&CK Category ⫘
MITRE mapping is based on the alerting signature.
Provided Data from Integration ⫘
- Alerts, NIDS, Netflow