SentinelOne Deep Visibility module for the SentinelOne Endpoint Protection Platform (EPP) is an endpoint protection solution that provides unparalleled search capabilities for all indicators of compromise (IOCs) regardless of encryption and without the need for additional agents.
Deep Visibility monitors traffic at the end of the tunnel, which allows an unprecedented tap into all traffic without the need to decrypt or interfere with the data transport. This in turn provides a rich environment for threat hunting that includes powerful filters, the ability to take containment actions, as well as fully automated detection and response.
Since Deep Visibility does not require an additional agent, and is a holistic part of the SentinelOne EPP platform, it is fully integrated into the investigation, mitigation and response capability sets, including process forensics, file and machine quarantine, and fully automated, dynamic remediation and rollback capabilities.
Additionally, Deep Visibility does not require any changes to network topology and does not require any certificates for installation. Visibility into encrypted traffic further enriches forensics insights and empowers security analysts with more holistic investigation capabilities without impacting the end-user experience.
