HyperDetect
BitdefenderHyperDetect is an additional layer of security specifically designed to detect advanced attacks and suspicious activities in the pre-execution stage.
HyperDetect enhances the security measures by incorporating an additional layer of protection to the current scanning technologies such as On-Access, On-Demand, and Traffic Scan. This added layer is specifically designed to combat the latest forms of cyber-attacks, including advanced persistent threats. HyperDetect significantly improves the effectiveness of the Antimalware and Content Control protection modules by incorporating advanced heuristics that are based on artificial intelligence and machine learning techniques.
HyperDetect is a powerful tool that can accurately anticipate and identify specific attacks, as well as effectively identify advanced malware before it is executed. This advanced technology enables HyperDetect to swiftly identify threats, surpassing the capabilities of traditional signature-based or behavioural scanning methods.
Note
This module is an add-on available with a separate license key.
Components
HyperDetect uses the following components:
GravityZone Virtual Appliance
Security agent (Bitdefender Endpoint Security Tools installed on Windows, Linux, & Mac endpoints)
Security Server Multi-Platform
Security Server for NSX-T
Security Server for NSX-V
Install and configure HyperDetect
To start using this feature, follow the steps below:
Note
This feature functions through the Antimalware module, which is included by default in all installation packages. If you already have the BEST agent installed on your endpoints, no further deployment is required.
Go to the Installation packages page.
Click the Create button in the upper-right side of the screen.
Type in the Name and Description for the new installation package.
Select the modules you wish to deploy.
Note
Make sure you include the Antimalware module.
Click Save.
Select the newly created package from the list of packages and click Send download links.
Enter the email addresses of the recipients and click Send.
Important
We recommend initially deploying the module on only a small number of endpoints. Test out the feature and make sure the initial configuration matches your company's security profile and needs.
Once you have confirmed the initial configuration is suited for your needs, continue deploying the module on all target endpoints.
Policies are used to enable and configure features both on endpoints and in terms of general functionality.
GravityZone comes with a default set of policy settings, that are custom tailored to meet the most common customer needs.
You can use these default policy settings and leave the configuration of the policy for a later date, but you need to follow the steps below to enable the feature from the policy page:
Go to the Policies page.
You can either:
Under Antimalware > Hyperdetect, configure the module.
Save your policy.
If you created a new policy, apply it on the endpoints where the feature is deployed.
Go to the Network page.
Select the endpoints you want to apply the policy to.
Click the
Assign Policy button at the upper side of the table.Select the policy you want to apply.
Click Finish.
Note
For more information, refer to Assigning device policies
If you have edited an existing policy, make sure it is applied to all endpoints where the feature is deployed.
This will ensure that the feature is enabled and configured to best suit your company's needs.
View Hyperdetect activity
Depending on how you configured your policy, the module will take one of the following actions when a suspicious file or process is discovered:
For files: deny access, disinfect, delete, quarantine, or just report the file.
For network traffic: block or just report the suspicious traffic.