Производители
Red Cloak is a cloud-native endpoint agent designed by Secureworks (a Dell Technologies company) to monitor systems for advanced threats across network and cloud environments. It collects telemetry data and identifies malicious behavior using machine learning and human intelligence.
“The process monitor client (RedCloak) for our servers has already helped with some attempted infiltrations through an Apache vulnerability a couple years ago.” Software Advice
Reviews for the Red Cloak agent are mixed, often depending on whether the user is a small business or a large enterprise. :
: Some reviewers find the interface user-friendly for standard tracking and alert triggering. Cons :
“RedCloak isolation containment takes 30 minutes to activate. Pulling the plug is faster. I have never seen RedCloak identify any threats where similar tools like Carbon Black/CrowdStrike have.” Reddit · r/sysadmin · 6 years ago
: Users have reported that the agent successfully blocked attempted infiltrations, such as those targeting Apache vulnerabilities.
