Jump to content

Adam Luzsicza

ESET Staff
 View Profile  See their activity

  • Posts

    5

  • Joined

 Content Type 

Posts posted by Adam Luzsicza

    Hash file => SHA-256

    in ESET Inspect On-prem (Detection and Response)

    Posted

    Hello OdoArdTus,

     

    In the latest version 1.6 of ESET Enterprise Inspector it is possible to view not only SHA1 hash values as the default but also their SHA256 values of executables in the executable details view. 

    Additionally if you require also MD5 hash values to be calculated for executables then this can be configured via EI Agent policy from ESET PROTECT (see screenshot below). MD5_hash_config.png

    If your are using an older version of EEI it is possible to enable SHA256 calculation via policy just like for MD5. 

    If you wish to block executables via EEI it is currently only possible to do so based on SHA1 values. SHA256 is planned for the future but I do not have a precise date for you yet.

    Adam, EEI Product Manager 

    EDR cloud solution with ESET PROTECT?

    in ESET Inspect On-prem (Detection and Response)

    Posted

    On 3/29/2021 at 4:25 PM, rubencastello90 said:

    Hello @MichalJ,

    Thanks for reply. For fully integrated I mean not login to differents consoles (2 Tabs on browser) and have all the information for EDR like computers, detections, alarms, tasks, etc...  in one place like ESET Protect, were we can remediate immediately or look for problems in CLIENTS at a glance. If detections are shared to ESET Protect it will be a good point to start but ideally EEI menu need to be integrated on ESET Protect I think. Additionaly, info about EDR on clients will be good point.

    imagen.thumb.png.5e5ca320749ec47bbe411140f484fd2f.png

    Having multiple consoles, panels or dashboards is a big pain for MSPs trying to deliver cybersecurity to companies due to overhead of having to search information across that panels or send tasks from different ways. We need to simplify it and integrate it:)

    I'm saying all of that that because I believe that EDR is a complement or different from EPP and they always are better together, so I don't want to treat it as separate. EPP for prevention and EDR for file-less atacks, behaviour based attacks or targeted attacks. Not like other vendors that sell EDR as magic new NextGenAV.

    And what about agent? It will be merged to Management agent or EPP?

    Another question...Can we expect this first phase before summer?

     

    Hi Ruben,

    Thanks for the valuable feedback - Michal did indeed forward it to the EEI team. Allow me to provide a little more information - EEI Cloud is one of our top priorities and you can expect it towards the end of Q4 this year. 

    In its first iteration it will be a separate console just like it is now with the on-premise versions of EEI + ESET PROTECT consoles. However, please note that they will be tightly integrated, will share the same single sign-on (SSO). We are definitely exploring multiple approaches such as merging EEI (or EDR functionality in general) with PROTECT, however we really want to make sure that the user experience is solid and this requires more time which is one of the key factors at the moment. Functionality-wise EEI Cloud will be really strong and equal to its on-premise counterpart (we plan to release and update - version 1.7 at the same time).

    For a seamless MSPs experience we plan to later implement the same style of multitenancy as is currently used in PROTECT, in the next version of EEI after the initial launch of its Cloud version.

×
×
  • Create New...