Sophos HQNews

Sophos dominates attack evaluation with 99% detection rate

Sophos, a global cybersecurity leader, has excelled in MITRE Engenuity ATT&CK Evaluations, achieving 99% detection coverage. Sophos Intercept X with XDR identified 141 out of 143 adversary attack steps in the evaluation, showcasing its strong capabilities in the cybersecurity realm.

The Intercept X with XDR solution stood out in the independent ATT&CK Evaluations thanks to its robust EDR and XDR functionalities, providing crucial insights into the “what,” “why,” and “how” of attacker behaviors. It also recorded extensive analytical data on 98% of the substeps in the ATT&CK Evaluations.

“MITRE’s evaluation is a powerful objective measurement of a technology’s ability to produce the fundamental observations and classifications needed to effectively identify and defend against attackers,” said Joe Levy, president and chief technology officer at Sophos. 

Sophos: Cybercriminals run contests to advance techniques
Sophos: Cyber defense impacts insurability

According to Levy, Sophos meticulously architects its solutions for security operators, empowering them with superior protection, detection, and response capabilities for known and unknown threats before they become full-blown, destructive attacks. The cybersecurity solutions provider believes that MITRE’s evaluation results demonstrate the robustness of its’ real-world security capabilities.

The MITRE ATT&CK Evaluations assessed 30 vendors’ ability to detect and analyze the attack tactics, techniques, and procedures of the sophisticated Russian threat group, Turla. Turla employs innovative methods and custom tools to evade security defenses, making it a challenging adversary. The evaluation aimed to provide unbiased insights into product capabilities for detecting advanced adversary behaviors.

Sophos Intercept X with XDR offers active adversary mitigations, such as Adaptive Attack Protection, which activates heightened defenses when a hands-on-keyboard attack is detected. It also features anti-ransomware technology, deep learning AI, and exploit prevention. Powered by Sophos X-Ops threat intelligence, the solution leverages the expertise of over 500 security professionals in SophosLabs, Sophos SecOps, and SophosAI.