Latest News
September 04, 2024 | Antivirus for Windows
Advanced EDR test 2024: Bitdefender Endpoint Security
AV-TEST performed an extensive evaluation of Bitdefender Endpoint Security Tools, concentrating on its Endpoint Detection and Response (ED) capabilities, from December 2023 to March 2024. The goal was to measure the product's effectiveness in identifying and counteracting threats typically associated with advanced persistent threats (APTs). The assessment included comprehensive testing scenarios that emulated two different attack patterns, each showcasing a variety of tactics and techniques used by sophisticated attackers.
A test commissioned by Bitdefender
and carried out by AV-TEST Institute
Scenario 1 - APT18-Style Cyber Espionage:
This scenario assessed the product's resistance to a meticulously planned attack reminiscent of those conducted by APT18, a group renowned for its advanced cyber espionage activities. The test recreated well-known APT18 strategies, such as spear-phishing, system reconnaissance, data exfiltration, and evasion techniques. The main objective was to evaluate the product's capability to detect, respond to, and mitigate complex attack vectors, thus providing insights into its ability to fortify organizational cybersecurity defences.
In Scenario 1, Bitdefender Endpoint Security Tools displayed strong detection capabilities by successfully identifying all techniques deployed during the attack. The product's robust monitoring and detection features were pivotal in neutralizing sophisticated cyber threats.
Notably, Bitdefender provided high-quality detections, offering detailed and actionable insights at every stage. It effectively categorized the techniques used, delivering comprehensive visibility into the attack's methods. This performance underscored Bitdefender Endpoint Security Tools' proficiency in managing intricate cyber-espionage attempts.
Scenario 2 - Mixed Tactics Resembling TA577, Turla, and FIN6:
The second scenario imitated the operational strategies of several notorious groups, including TA577, Turla, and FIN6. This scenario presented a complex combination of phishing, data manipulation, and lateral movement techniques. The aim was to evaluate Bitdefender's defence mechanisms against multifaceted and advanced threats that intend to extract sensitive data and establish a persistent presence within the network.
In Scenario 2, Bitdefender Endpoint Security Tools demonstrated exceptional performance by effectively detecting all tactics and techniques utilized. The product showcased its comprehensive capabilities by identifying the full range of techniques employed in this complex scenario. This thorough detection highlights the product's advanced ability to adapt to various threat behaviours and its remarkable effectiveness in countering a wide range of cyber threats.
The product's performance during these tests reinforced its robust ability to protect systems against highly complex and varied attacks. Bitdefender Endpoint Security Tools consistently identified and countered every aspect of the simulated threats, demonstrating its capacity to provide complete coverage against sophisticated attack patterns.
Based on the findings, Bitdefender Endpoint Security Tools has earned the prestigious AV-TEST
Approved Endpoint Detection and Response Certification, signifying it as a trustworthy and effective solution in the field of cybersecurity.