Garda combines host clustering and risk scoring to detect hidden attacks - CNews

▤ Summary

Garda has added a new NDR capability that combines clustering with host risk scoring to help detect hidden attacks. The system uses ML, DPI, NetFlow, IDS, threat intelligence feeds, and deception signals to identify suspicious behavior and reduce manual investigation effort. The company says the approach can improve SOC detection quality and cut false positives while fitting into existing SIEM environments. The release targets organizations that want stronger network threat detection and faster analyst triage.

▦ Linked Companies