Sophos, a global leader of innovative security solutions for defeating cyberattacks, announced its strong results in the 2024 MITRE ATT&CK® Evaluations: Enterprise. Sophos XDR detected 100% of the adversary behaviours in attack scenarios targeting Windows and Linux platforms. They mimicked malware strains from ruthless ransomware-as-a-service gangs LockBit and CL0P. Further, all of Sophos’ responses to these ransomware attack scenarios were marked “technique”. This is the highest possible rating that denotes who, what, when, where, why and how attacks were carried out.
Sophos XDR achieved:
- Analytic coverage’ ratings for 99% of sub-steps [79 out of 80] across three comprehensive attack scenarios
- Highest possible [‘Technique’] ratings for 98% of sub-steps [78 out of 80]
- Highest possible [‘Technique’] ratings for 100% of sub-steps in the Windows and Linux ransomware attack scenarios
“Attackers are relentless to innovate techniques to bypass trusted security defenses. This assessment from MITRE helps security buyers evaluate the effectiveness against today’s threats.” Said Simon Reed, chief research and scientific officer at Sophos.
“Sophos commits to transparency and conducting third party measurement to help security buyers make informed decisions. This way, they are able to strengthen their security posture. We’re consistently evolving our solutions, just like attackers are constantly evolving their tactics. So our customers can stop known and unknown threats before they escalate into destructive attacks.”
MITRE ATT&CK® Evaluations are among the world’s most respected independent security tests. This round of MITRE ATT&CK Evaluations: Enterprise evaluated the abilities of 19 vendors in detecting and analyzing attack tactics, techniques, and procedures [TTPs] leveraged by real-world adversarial groups.
In this cycle, MITRE expanded ATT&CK Evaluations to include macOS attacks that emulate tactics from the Democratic People’s Republic of Korea. Sophos XDR achieved outstanding results, with 19 out of 21 detections classified as “technique,” the highest possible rating.
Sophos XDR actively mitigates adversaries using advanced features, including the industry-first Adaptive Attack Protection, which immediately strengthens defenses upon detecting a hands-on-keyboard attack. This feature stops the attack and gives defenders additional time to respond. It also incorporates anti-ransomware technology, deep learning artificial intelligence, and exploit prevention to stop attacks before they escalate. Powered by Sophos X-Ops threat intelligence, a cross-operational task force of over 500 experts from SophosLabs, Sophos SecOps, and SophosAI, Sophos XDR delivers unparalleled protection.
