- LiquidNetworx - FortiEDR Presentation - https://liquidnetworx.com/
- Andrew Hammond - Engineer -
This email address is being protected from spambots. You need JavaScript enabled to view it. - Robert Short - Sales -
This email address is being protected from spambots. You need JavaScript enabled to view it. 972-532-2424 - Manage approximately 100K clients
- $36/year/device, No minimum purchase required
- Fully managed EDR
- Access to Full Admin portal
- Demo in video
- Andrew Hammond - Engineer -
Alrighty, let me just do the last little bit and I think we'll get a start Welcome everybody to November seventeenth edition of technology check in thanks, everyone for showing up today. And we actually it was kind minute thing came from. connect. had school district referring liquid networks about having 4 Edr product. this morning able set lipid come talk us So today have andrew hammond reduce from networks. i'm gonna turn on Youtube did much time. you know it's pretty open flexible here. how go so cool Well, thanks guys my name's Andrew Hammond. So, as said director strategic services at will share couple different things i'll by sharing deck with you, walk through give overview liquid. then can jump into specifically around what side. I'm whole screen. cause don't see Powerpoint option. you'll bear all Okay, yup keep like because sitting laptop short notice didn't dual screens completely ready. presentation but this. Just flip these slides dive whatever want. company, 26 year old company we've been long We lot agency work. many years. I've 7 run engineering those are listed that so. You who am, where resume wise stc npd p VPN. sp. every Cisco professional level sort ofification attain doing 25 Been running fortune, 500 100 size customer. For i've here really Robert crazy enough tell could build company. would use now Kind idea, is we're focused fortunate security fabric, some 40 edr piece, end. portal show this, offer largest managed service outside Fort Net themselves Continental United States. 100,000 devices under management platform. You'll our price point $36 per device year. That's fully 24 365 environment. The unique if haven't seen not only does out box integrate gates, anything says forward front knack sandbox gates. addition 100% effective against Ransom, where, according latest minor results. an extremely good product, quite frankly can't be beaten industry when comes version includes onboarding event correlation, automated playbooks, threat hunting, exception, building, training, incident, response. invested. Another quick deeper later Some Ed products is, customers full admin access portal. train exceptions yourself. manage need then, addition, sock team available triage correlation. Those things. complete white glove solution wrapped framework. again, second, jumping other services. Many times people ask Florida Guard line card, monitoring gate firewalls. know, world fordgard. product bring market they're events actual firewall. right? that's Ford guard stock internally. 27 person network operations Center That operation circuits. Monitoring devices, most consider craft work it. We're calling carriers troubleshooting outages type bill $50 circuit month. also $10 device. charge router switches firewalls, load balancers packet processors. Everything else free, tool called Ovik, provide which monitoring, management. Perspective, one Knock offer, additional frankly, reason inexpensive side service. ticket model services, means, rates projects way breakfast issues, $350 ticket. A 2 min, h or days engineers literally fix certified, partner sd specialized branch 0 trust specialized, month ago, were first fortunate. expert msp integrator, cloud fortunate, $300 model. Also everything knock space. commitment, meaning pay until service, tickets me, your bills $0 also. that. sim way, well, own their infrastructure, whether premium infrastructure take action alerts infrastructure. commonly alerting, send alerting knock, $5 alert offering Any than going Edr. But any Or make sense? Anybody questions before Thank go. Let find Screen. Since shared you. probably lived minute, right, av space next Gen. Av. generation. Edrs 40. Is considered second Edr, hear say 5 10 adr It wraps itself kernel Os, its protection. fortunately purchased Silo years they silo, patented endumeration wrapping looking trying kernel. ransom malicious activity, do, needs it, order encrypt something escalate privilege move laterally reach command control server. All require benefit platform? What up, administration Really collectors software system. Sorry ferrier showed dogs decided insane, barrier horse stall. background apologize here's collector ability everything, do. helping maintain system windows back down windows. Xp: windows, Mac Os. major releases Linux supported Even though based localized collector. systems want expose them Internet. store systems. matters air gaps, networks, ot or, compliant integrations perspective box, gets blocked automatically feed fordgate blocking across entire network. external connector create policies read information, yeah, so, happens? There put core firewall is. via Api username password, key. block afford manager you're manager. feeding Ip list fordigate. done makes sense yep Nac. companies. call Xdr platform Ford, included part default license. works tools. perspective. companies extra scan files look hashes. They section weekly, buy weekly scans hashes, license box. piece kinda using idea wanted break multiple groups. apply rules let's lab computers versus teacher computers. Right. internally well support devices. internal being certified shop, press target coming after us. differentiator yesterday there FBI. there's FBI case Federal got breached Iranian hackers, in, built Defender C drive operating cases turned off defender downloaded content. sits level. care administrative local domain want, rid isn't no consequence. remove it? disable Once installed glass password locally uninstall to. time endpoints production. typically away fast word contention. If computer jacked Internet, possibly should reimage security. Software glass. isolate isolated, server isolated isolation removes exception allowing Rdp inbound. isolates computer. already nothing does. doable This case. turning iot device, detection doesn't map single see. subnet there, export inventory policy wise. brains 40, mentioned. enumerate ways activity. execution prevention ways. 97% Avs Fall section. always test out. catch almost bad world. problem knows 3% all. keeps night exfiltration ransomware play. key amount It's exploit, detected process hollowing. These Really, reaching escalating encryption resources, they've tried options second. mind control. restrict USB level, allowed audio, mass storage. sit difference between audio storage playbooks Here's rundown works. happens occurs tries spawns goes brain owns 33, third firewalls going. brain. Then classifies either likely safe conclusive potentially, suspicious malicious. blocked. labeled safe, liable asked question application. write playbook takes remediate instance, terminate process, delete file, clean persistent data over happening instantly soon Malicious selling say, Hey, bunch research decide claiming 15 min respond something. am telling instantly, remediation effort depending entity real application events. allows search critical, high vote medium vulnerabilities. applications cve identifiers apply. In organization. application, handy, especially ir situations broad in. pseudo hacked, environments encrypted. quick, customer deployed 80 workstations 1,000 workstations. About silent screen share. Right, Splash Top ever used Slash legitimate thread actors. splash top, end user Doesn't watching Ddr. quickly saw said, even feeling went looked, Splashtop connected Bulgaria. hey? y'all business they, Andrew, gave globe couldn't talking indication flash stop perspective, both individual modify action, deny, group, release out, Log Fourj big customers, said. Hey? Can Cb identifier log? 4. J. affected, critical ones deny patching right. powerful stuff here, skip forensics You're viewer. mentioned breaks 28 8 dollars license, $8 pricing goal, twice day, handle event. before, technology. has occurred. Now Do happen environment? archive ongoing? forensics. chain occurs, drop stack view, step equation. case, pre-executed. issued Powershell hash click virus total, thinks hash. Does anybody back, step, pcap somebody loop pcap. issued. power shell script not. doing. try activity gotta decision right remediate, issue. deal, programs problem. Os nice app. terminating deleting file cleaning data. retrieve memory. memory calls huge red hunting. dump. exactly kernels deal methods procedures document lines How react each types events? final maker exception? ourselves? made? created, differently. However, done. groups, destinations, users. important familiar antiviruses, exceptions. for, drive, folder, creating allow signed Microsoft current path. specific Pcap Dot ex assigned again. enumerated settings wrong. Let's Florida, fort Cloud wrong, okay knock. My research. research, perfectly fine created exception. exact scenario. ransomware, privilege, access, Access. events, somewhere. really. wouldn't world, smidgen successful. reaches building again fail like's. Why, claim effective. why, mighter Ransomore. built. Last thing, promise answer forensic money hunting types, behaviors, registry logs, processes client story mine Saturday, remember red. guy him phone awesome. Please me. him, controller. felt compromised. Sure enough, o'clock morning. Every day downloading database China gut reaction off, stop. art science play grace God. this? 200 collectors? desktop what's there. Because doubt started domain. did, lie Cio's Laptop. found same min. nay, name Company 150 K. dx took ran 250 180 hash, server, switched protection mode Typically, deploy, deploy watch 3 weeks, learn environment, build. flipped killed hashes Dc. told Look! dumb luck, like, ahead. happened fixed bit, encrypted gone thread. Hunt tool, coolest price. on. providers game they'll sell bits pieces framework, add licenses market. on, including management, story, 30 less man. suppose deep woods Of here? implement mean, tech limited knowledge, them. part, happened, 100%. guys, team, follow sun socks globe. report badge employees San Antonio, Texas. 3,000 square 30,000 foot co-location center based. Out people. Are gloves help installed, board input deploy. looks run, us? Yes, absolutely. everywhere, education Experience bulgaria We'll questions, us, thing. Maybe exchange situation Bulgaria why sure meeting environments. interface beyond that, heavy lifting correlation explanation happening. Our opinion wants portal, yourself restrictive. Right? point. absolutely deployed. monitor Answer question. Sir John, question, bottom waiting hit They're minimum ctf 1 seat commitment When yearly 36 bucks multi-year commitments commitment. year, term. 50 110 months now, now. renew, co-term front, earliest possible renewal Sounds good. restrictions on? Who purchase matter private same. flat fee anybody. hard Russian actor, disclose upfront prefer actor. restriction engage emailed Robert, how? that? like? Absolutely. email myself Robert. official, Edr: W. Msa. contractualize Doing sow, quote number need, Give msa sow once place. kickoff Leadership? Both lead Manager's Dave. Leads Jacob. download collectors. call? asking groups? build, mode. begin system, weeks meetings week review 45 correctly still period feel comfortable sometimes Get later, change mode, event, First reviewing insidents day. handling meet quarterly, holistically seen, accurate 24, 7, 3, 65. Xyz unblocked. Right unblocks. might more, Question. payment methods, orders. purchase, credit, card check, so? above. credit carries penalty, orders fine. Ac. H. mechanism paying but, cards carry obviously, through. pass popped Man. else. Guess greatly appreciate term turnaround great expecting, traffic generate particular sees. guess itch, offered looked ago. quantities 100, myself. another groups 25, very cost So. addresses issues accurately handcuffs up. yes, sir, Yeah, earn business, Alright. thank much, y'all, too. Bye, bye. anyone post 12 website. Andrews robert's contact information notes. posted site i'd appear. interested area I'd least expect happy journey ahead Matt shilling tug group playing office. working submitted Finance Committee, School Board plans one. schools fund invented proposal basically invention demented hope delayed simply, Starting seventh, eighth graders, purchasing remainder Galen. chromebook chromebook. spread payments rest essentially increase monthly school. brand chromebooks. fiscally responsible. As far goes. Dns filtering, securely. guardian, suggestions ears, concern definitely campus. Still students otherwise foremost with's Otherwise English semester. virtual learning, remote teacher, Elevate 12. interesting ride meeting? agenda items. you? open? Pass vulnerability scanning. left lunchtime, portion stay phy lunch opportunity participated survey. survey directors. 13 responded varying answers. wide-ranging. platforms Wise ipad sis his granular personal salary data, more range 10,000 ranges. varied went, messaging relying for? goes, backup plan thorough, hr Financial books books. Substitute teaching apps positions. wide ranging brought demo new acer thought was. fairly rugged. pricing, surprising low non touch along 20 good? sounded Mlc. Had them, issue intentional. promising sound otherwise. Thanks, Dan, pictures What's there? peaked course beginning eye opener. plateau regular chromebooks, labeling prior he hug label anything. getting organized update. Jason, Don't mention securely schools, mean campus defining campus, home. maybe lift Seems impressed infomercial, pricing. complaint yup. chromebooks laptops machines Acid Directory. Anything else, alright wanna group? No, presentation. Now, Yep: agree. better messed fully. Not at? Pat tag fire stuff. tiny mandatory minimums. Has sonology smology, active Google space, Pcs. such whenever muscle synology since analogies beam instances. boxes can, ecosystem. ton lots backup. solution. mean. Io 18 support. workspace, endpoints. secretary's repository features Have capable yeah. processor Pay pack pcs whatnot. enterprise solutions servers. son knowledge guess. one, know. thinking putting s sonology. sounds have. plus safe. swiss hasn't heard fireproof waterproof Dr. withstand being, Technically recover deaf. Your room burns flooded submerged underwater, week, Tim feet water technically sealed Go Thanks best Friday recording course, Thanksgiving. won't week. it'll It'll december next. following