New Extended Detection and Response (XDR) Capabilities Recently Added to the Vectra AI Platform by Mark Wojtasiak

Vectra AI summarizes six months of XDR platform progress, announcing a 24x7 global MXDR service, an OEM partnership with Gigamon, and numerous detection and investigation enhancements. New and enhanced coverage includes Kerberoasting detections, AWS-focused alerts (RDS snapshot exfiltration, traffic mirror creation, AMI exfiltration, Organization exit, privilege escalation, CloudTrail logging evasion), expanded M365 and Azure AD detections, SIEM/SOAR enrichment for Suricata signatures, extended metadata retention, multi-AD support, and AD lockdown configuration options.