All Press ReleasesSE Labs announced today that it has awarded Palo Alto Networks Cortex XDR its highest AAA rating after the product achieved 100% total accuracy against both targeted attack chains leading to ransomware deployment and 636 ransomware files.
The test examined Cortex XDR against two distinct challenges facing organisations. The first is detecting and stopping attackers conducting deep targeted intrusions across a network before delivering a ransomware payload. The second is protecting endpoints against ransomware malware itself, including new variations designed to evade detection.
For the ransomware deep attacks, SE Labs testers emulated attack chains based on techniques associated with some of the world’s most notorious ransomware groups, including LockBit, Black Basta, Akira, Medusa and DragonForce.
Attacks began with methods such as phishing and compromised access before progressing through activities including system discovery, privilege escalation, credential access, data exfiltration and lateral movement. Palo Alto Networks Cortex XDR detected and defended against all 10 deep attacks and their payloads.
“Ransomware attacks are increasingly moving away from the scattergun approach of trying to infect as many victims as possible. Criminal groups can identify organisations capable of paying substantial ransoms and then persist in trying to compromise them,” says Simon Edwards, CEO and founder of SE Labs.
“That makes it important to look beyond whether a security product can recognise a ransomware file. We also need to understand whether it can detect the attacker as they gain access, escalate privileges and move through the network. Cortex XDR performed exceptionally strongly in both parts of this test, providing complete visibility of the deep attacks while also protecting against every ransomware sample we deployed.”
Palo Alto Networks Cortex XDR provided visibility across the full attack chain, including activity beyond the initially targeted endpoint, giving testers insight into how the attacks progressed through the network before ransomware was deployed. It also protected endpoints against all 636 ransomware files, including new variations designed to test protection against previously unseen threats.
By also allowing all legitimate applications, Palo Alto Networks Cortex XDR achieved a Total Accuracy Rating of 100% and an AAA rating for advanced security.
The full Advanced Security Test Report: Palo Alto Networks Cortex XDR – Ransomware Protection and EDR is available to download here.
