Announcement

Collapse
No announcement yet.

Cyber Hunting - How do I hunt ?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Cyber Hunting - How do I hunt ?

    Need to look at your network as WEB (web site and cloud presence) or LAN (office).

    LAN(OFFICE): If you want to do Cyber Hunting in your LAN then https://edr.cwatch.comodo.com download this free tool and watch your network and identify what is happening, when...what is bad, what is good and who did what...

    WEB: If you want to Monitor and do Cyber Hunting and protect your WEB then enable Cwatch WEB https://www.comodo.com/managed-secur...ice/cwatch.php for your website. This will combine a WAF, SIEM, SOC, CDN and Security Analysts watching, protecting and providing intelligence.

  • #2
    melih I wanted to look at the EDR but when I attempted to install it, it said it wasn't compatible with Comodo Security. How is it meant to be utilized?

    Comment


    • #3
      Originally posted by MTekhna View Post
      melih I wanted to look at the EDR but when I attempted to install it, it said it wasn't compatible with Comodo Security. How is it meant to be utilized?
      Hi,

      Comodo security tools and EDR compatibility is something that we are currently working on. It is planned to be available with the upcoming release. When completed, you will be able to fully benefit EDR along with other Comodo tools you currently utilize.

      Thanks for the feedback.

      Comment


      • #4
        Are we going to be able to run EDR in C1? =)

        Comment


        • #5
          Originally posted by Noiden View Post
          Are we going to be able to run EDR in C1? =)
          Yes we will. This is already in the roadmap. I think this feature will be implemented in one of the 2018 Q2 releases.

          Comment


          • #6
            Cool... But is it possible to try EDR now? Or do I have to install some other agent for that solution?

            Comment


            • #7
              Originally posted by Noiden View Post
              Cool... But is it possible to try EDR now? Or do I have to install some other agent for that solution?
              There is a 2nd agent and reg edit entry, I'm going to wait until its part of C1

              Comment


              • #8
                Originally posted by Noiden View Post
                Cool... But is it possible to try EDR now? Or do I have to install some other agent for that solution?
                Yes it's possible to try it.

                You should:

                1. Visit https://edr.cwatch.comodo.com
                2. Get yourself an account.
                3. Log in to the portal and download the agent.
                4. Install the agent and like dittoit remarked you should do the registry pack installation (Registry installation will vanish with the future releases BTW)
                5. Make sure the "cwagtsrv" is running (Windows/Services)

                Then your agent starts sending events to our servers. You can enjoy world's first EDR solution.

                Always keep in mind that you can post your questions here or you can reach us at edrsupport@comodo.com

                Comment


                • #9
                  Originally posted by Alphan View Post

                  Yes it's possible to try it.

                  You should:

                  1. Visit https://edr.cwatch.comodo.com
                  2. Get yourself an account.
                  3. Log in to the portal and download the agent.
                  4. Install the agent and like dittoit remarked you should do the registry pack installation (Registry installation will vanish with the future releases BTW)
                  5. Make sure the "cwagtsrv" is running (Windows/Services)

                  Then your agent starts sending events to our servers. You can enjoy world's first EDR solution.

                  Always keep in mind that you can post your questions here or you can reach us at edrsupport@comodo.com
                  4. Install the agent and like dittoit remarked you should do the registry pack installation (Registry installation will vanish with the future releases BTW)

                  "It already has, was an EXE when I installed the new agent today"

                  Comment

                  Working...
                  X