CloudHASH Security Information

CloudHASH is an enhanced endpoint security plug-in for McAfee ePO that provides: • Advanced Threat Detection • Incident Response • APT and Polymorphic Malware Hunting • Vulnerability Remediation • Policy Enforcement • Data Loss Prevention • Application Communication Whitelisting CloudHASH works by continuously monitoring, recording, and indexing changes locally on every machine – providing users with real-time access to present and historical data about each endpoint. Using the existing McAfee agent, it instantly informs ePO of threats and generates a FuzzyHASH of all files, allowing for a "percent-match hash"​ vs "an exact-match hash"​ such as an MD5 or SHA1. The historical information recorded locally on every machine includes over 145+ critical data points (such as file information, event logs, running processes, installed products, Outlook email, Windows registry, network adapters, and more). The endpoint data, combined with the FuzzyHash engine, provides users with the ability to detect and remediate the most advanced threats and polymorphic malware. CloudHASH leverages your existing investments in McAfee and delivers unmatched out of the box capabilities for: • End-to-end incident response, remediation, & recovery from ePO • Continuous endpoint recording and monitoring • Polymorphic malware detection with piecewise Fuzzy Hashing • “Ask a question” natural language interface • Vulnerability management (patch management/software distribution) • First response forensics and one-click quarantine of compromised hosts • Import, query, and monitor for IOCs in real-time • Application communication whitelisting – detect and remove disallowed applications • User privilege monitoring, asset geo-location, and unmanaged asset remediation CloudHASH products are developed in partnership with McAfee (now Intel Security) through the McAfee Security Innovation Alliance. CloudHASH Security is a Division of InfoReliance Corporation.