A solution deployed on endpoint devices to prevent file-based malware attacks, detect malicious activity, and provide the investigation and remediation capabilities needed to respond to dynamic security incidents and alerts.

Signature-based Antivirus can't prevent most recent attacks

TrendMicro, Palo Alto Networks, Malwarebytes, CarbonBlack

An endpoint protection platform (EPP) is a solution deployed on endpoint devices to prevent file-based malware attacks, detect malicious activity, and provide the investigation and remediation capabilities needed to respond to dynamic security incidents and alerts.

Detection capabilities will vary, but advanced solutions will use multiple detection techniques, ranging from static IOCs to behavioral analysis. Desirable EPP solutions are primarily cloud-managed, allowing the continuous monitoring and collection of activity data, along with the ability to take remote remediation actions, whether the endpoint is on the corporate network or outside of the office. In addition, these solutions are cloud-data-assisted, meaning the endpoint agent does not have to maintain a local database of all known IOCs, but can check a cloud resource to find the latest verdicts on objects that it is unable to classify.

Leverage a full portfolio of advanced detection techniques against an ever-growing variety of threats and targeted attacks. By integrating endpoint protection and EDR in a single agent, EDR offers a comprehensive detection and response solution with automation and remediation capabilities.
Take advantage of the options to extend endpoint detection and response capabilities to other security vectors, including email, servers, cloud workloads, and networks to benefit from correlated detections and more insightful investigations.
View detections, perform investigations, and initiate response from a single place for endpoints alone or across other Trend Micro security layers.