Advanced Threat Detection (ATD)

Advanced Threat Detection (ATD)combines static detection and behavioral analysis capabilities of files to help our customers detect incoming malicious files and potential hacker attacks.

Get Demo

Addressing Highly Stealthy and Rapidly Evolving Malicious Sample Attacks

The system includes seven core detection engines:

Threat Intelligence Detection Engine

Composite Antivirus Engine

Ransomvirus Detection Engine

Intelligent Reverse Engineering Engine

YARA Detection Engine

Dynamic Behavior Detection Engine

Memory Attack Detection Engine

Addressing Highly Stealthy and Rapidly Evolving Malicious Sample Attacks

The system includes seven core detection engines:

Threat Intelligence Detection Engine

Composite Antivirus Engine

Ransomvirus Detection Engine

Intelligent Reverse Engineering Engine

YARA Detection Engine

Dynamic Behavior Detection Engine

Memory Attack Detection Engine

Addressing Highly Stealthy and Rapidly Evolving Malicious Sample Attacks

The system includes seven core detection engines:

Threat Intelligence Detection Engine

Composite Antivirus Engine

Ransomvirus Detection Engine

Intelligent Reverse Engineering Engine

YARA Detection Engine

Dynamic Behavior Detection Engine

Memory Attack Detection Engine

Addressing Highly Stealthy and Rapidly Evolving Malicious Sample Attacks

The system includes seven core detection engines:

Threat Intelligence Detection Engine

Composite Antivirus Engine

Ransomvirus Detection Engine

Intelligent Reverse Engineering Engine

YARA Detection Engine

Dynamic Behavior Detection Engine

Memory Attack Detection Engine

Leading technology,
Obtain more accurate detection results

Detection Capability

Leading Detection Capabilities

Intelligent Unpacking and Reverse Analysis: Intelligent detection of files and reverse analysis of packed files.

Memory-Based Vulnerability Exploit Behavior Detection: By conducting fine-grained monitoring of memory behaviors such as reads, writes, and executions, Ansen ATD can identify the attack behaviors of samples that exploit both known and unknown vulnerabilities.

Fileless Attack Exploit Detection: In-depth analysis of various script interpreters such as CMD, POWER SHELL, VBA, VBS, etc., to detect and alert on corresponding attack behaviors.

Detection Capability

Leading Detection Capabilities

Intelligent Unpacking and Reverse Analysis: Intelligent detection of files and reverse analysis of packed files.

Memory-Based Vulnerability Exploit Behavior Detection: By conducting fine-grained monitoring of memory behaviors such as reads, writes, and executions, Ansen ATD can identify the attack behaviors of samples that exploit both known and unknown vulnerabilities.

Fileless Attack Exploit Detection: In-depth analysis of various script interpreters such as CMD, POWER SHELL, VBA, VBS, etc., to detect and alert on corresponding attack behaviors.

Traceability Capability

Trace to the source, Immediate Visibility

Ansen ATD leverages known sample characteristics and behavioral attributes to detect and match samples, automatically analyzing the similarities between samples and identifying associations with hacker groups.

Traceability Capability

Trace to the source, Immediate Visibility

Ansen ATD leverages known sample characteristics and behavioral attributes to detect and match samples, automatically analyzing the similarities between samples and identifying associations with hacker groups.

Behavioral Aggregation

Sample Execution Timeline Aggregated Analysis

The system employs a smart assessment of sample intent using its behavior monitoring engine and presents aggregated execution timelines.

· Process Release Relationships

· Process Paths

· Command-Line Parameters

· File Attributes

· Classification of Risky Behaviors

· Detection of Unauthorized Outbound Connections

· Detection of Released Files

Behavioral Aggregation

Sample Execution Timeline Aggregated Analysis

The system employs a smart assessment of sample intent using its behavior monitoring engine and presents aggregated execution timelines.

· Process Release Relationships

· Process Paths

· Command-Line Parameters

· File Attributes

· Classification of Risky Behaviors

· Detection of Unauthorized Outbound Connections

· Detection of Released Files

Business Application Scenarios

Email Attachment Security Detection

Detects malicious attachment samples in emails to prevent users from falling victim to phishing attacks.

Cross-Network File Security Detection

Verifies the security of files which come from external networks, then entering internal or dedicated networks.

Office Document Security Detection

Analyzes the security of everyday office files to ensure enterprise data security.

Sample Intelligence Incubation

Combines malicious sample information captured by systems such as honeypots to analyze sample attack methods and C&C addresses.

Business Application Scenarios

Email Attachment Security Detection

Detects malicious attachment samples in emails to prevent users from falling victim to phishing attacks.

Cross-Network File Security Detection

Verifies the security of files which come from external networks, then entering internal or dedicated networks.

Office Document Security Detection

Analyzes the security of everyday office files to ensure enterprise data security.

Sample Intelligence Incubation

Combines malicious sample information captured by systems such as honeypots to analyze sample attack methods and C&C addresses.

Business Application Scenarios

Email Attachment Security Detection

Detects malicious attachment samples in emails to prevent users from falling victim to phishing attacks.

Cross-Network File Security Detection

Verifies the security of files which come from external networks, then entering internal or dedicated networks.

Office Document Security Detection

Analyzes the security of everyday office files to ensure enterprise data security.

Sample Intelligence Incubation

Combines malicious sample information captured by systems such as honeypots to analyze sample attack methods and C&C addresses.

Collaborates seamlessly with various devices for comprehensive threat detection and response

What ATD can benefit you

Multi-Layer Inspection Mechanism: Comprehensive detection at the kernel, memory, and driver layers, eliminating blind spots in detection and uncovering advanced attacks.

Intelligent Behavioral Analysis Detection Based on Samples: By training on a vast number of samples, it converges attack behaviors at the execution level, embedding hundreds of dynamic behavior monitoring points to significantly enhance detection capabilities.

Multi-Engine Collaborative Response: Utilizes seven major engine technologies to construct an advanced threat protection system based on dimensions such as behavioral chains, feature libraries, binary vulnerabilities, intelligent reverse engineering, and threat intelligence.

What SOC can benefit you

Multi-Layer Inspection Mechanism: Comprehensive detection at the kernel, memory, and driver layers, eliminating blind spots in detection and uncovering advanced attacks.

Intelligent Behavioral Analysis Detection Based on Samples: By training on a vast number of samples, it converges attack behaviors at the execution level, embedding hundreds of dynamic behavior monitoring points to significantly enhance detection capabilities.

Multi-Engine Collaborative Response: Utilizes seven major engine technologies to construct an advanced threat protection system based on dimensions such as behavioral chains, feature libraries, binary vulnerabilities, intelligent reverse engineering, and threat intelligence.

Advanced Threat Detection

Effectively ensuring that customer core business is not interrupted and core data is not stolen.

Start Trial

Fill in your contact information.
We will contact you as soon as possible.

Get Demo