Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

How does Primary Response adapt to changes in the IT environment such as application changes or system patches?

0
Posted

How does Primary Response adapt to changes in the IT environment such as application changes or system patches?

0

Primary Response can easily adapt to changing IT environments. First, the security administrator can suspend Primary Response Agents on affected machines, implement the operating system update, application upgrade or security patch, and then resume the agents and instruct them to readapt. The administrator can perform these operations on agents grouped either by application or by machine type (for example, group application patches by application, operating system patches by machine). As the agent readapts, it automatically profiles incremental application changes. While readapting, the agent will not detect, prevent or alert on system call sequence behavior. However, during this time, the agent will continue to detect, prevent and alert on any code injections and buffer overflows, which account for the largest class of attacks in the enterprise. Due to the incremental impact of change management on application profiles, the adaptation to change is typically much quicker than the initi

Related Questions

What is your question?

*Sadly, we had to bring back ads too. Hopefully more targeted.

Experts123