Check Point Infinity NDR is a comprehensive technology stack for Network Detection and Response.
The Check Point Infinity NDR service concept:
<ul>
<li>Sensors analyze network traffic, and create logs which are sent to the NDR cloud for storage and analysis.</li>
<li>Behavioral Analytics AI engines process the logs and create analytical conclusions.</li>
<li>Human analysts use event visualization tools for more data comprehension.</li>
<li>Identify data anomalies through correlation with ThreatCloud intelligence and application risk scoring.</li>
<li>Publish analytical conclusions as threat indicators and tags.</li>
<li>Input feeds pull threat indicators from third party threat intelligence sources.</li>
<li>Enforcement points apply the indicators and match them to network traffic, for detect or prevent actions.</li>
</ul>