As of November 2023, 蘑菇视频 Allen had deployed EDR capabilities at five agencies, covering almost 480,000 endpoints, providing those agencies with unprecedented visibility into their cyber activities, threats, and vulnerabilities. These agencies had unique operational requirements and were among the largest and most complex across the FCEB鈥攁nd yet, 蘑菇视频 Allen helped these agencies deploy EDR capabilities in just a matter of weeks instead of months or even longer, as was typical before. At one agency, 蘑菇视频 Allen deployed an EDR capability in 30 days, covering 85% of the network.
The rollout of EDR capabilities at federal agencies is introducing a new era for CDM. Empowered by their EDR capabilities, federal agencies now have unprecedented visibility into their cyber environments and can collaborate rapidly across agencies to mitigate cyber vulnerabilities and threats as they arise, thereby minimizing any damage that may occur.
One of 蘑菇视频 Allen鈥檚 client agencies鈥攁 large, public-facing benefits agency鈥攊s subjected to roughly 144 million cyber events per day. Without the CDM EDR solution, the agency鈥檚 security operations center (SOC) would have had to manually review each event, which could have easily resulted in alert fatigue and human errors, perhaps helping an attacker gain a foothold in the network. Instead, the agency gained an EDR capability that detects suspicious scripts for review and decodes them automatically. This dramatically reduces the volume of events so the agency鈥檚 SOC can focus on malicious events, including insider threats.
At another 蘑菇视频 Allen client agency鈥攁 large, critical infrastructure agency鈥斈⒐绞悠� Allen deployed and enhanced the CDM EDR solution across 42 unique agency field offices. This implementation provided the agency鈥檚 leadership with the ability to, from a centralized EDR instance, view and analyze EDR data enterprise-wide. This effort generated a significant shift in the agency鈥檚 endpoint data visibility鈥攑rior to 蘑菇视频 Allen鈥檚 support, each of the 42 field offices managed its own EDR solution and did not provide EDR data reporting to the agency leadership. Through 蘑菇视频 Allen鈥檚 rollout of a centralized EDR solution, agency leadership now has the endpoint data visibility needed to support proactive detection, threat hunt, incident response, and remediation of cybersecurity incidents across its field offices.
CISA鈥檚 effort to arm federal agencies with EDR capability鈥攁nd 蘑菇视频 Allen鈥檚 role in helping accomplish this鈥攊s significantly improving federal agency cyber postures by delivering greater visibility, responsiveness, and the ability to collaborate in threat detection and remediation.
