McAfee Corp. today announced a significant expansion of its MVISION Extended Detection and Response solution by correlating the extensive telemetry of McAfee’s endpoint security solution, Secure Access Service Edge solution and threat intelligence solution powered by MVISION Insights.

The new integrations are designed to protect organizations against the most advanced threats while simplifying security operations with unified control and visibility from device to cloud. The expanded version of MVISION XDR is being pitched as the first proactive, data-aware and open extended detection and response platform designed to help organizations stop sophisticated, multivector attacks with unified threat detection and response that connects and fuses disparate endpoint, network and cloud data sources.

With the expansion, XDR incidents are now enriched with actionable threat insights from McAfee’s SASE solution detecting cloud threats that occur within web and software-as-a-service environments. This is said to expand situational awareness to drive better and faster decisions while elevating the security operations center to a new level of efficiency and effectiveness.

“SOC processes involve siloed monitoring and detection tools that generate an overwhelming volume of security alerts that often require manual effort to sort through and force analysts to take a reactive posture,” said Shishir Singh, chief product officer of McAfee’s enterprise business. “AI Guided Investigations serves as the catalyst allowing analysts to more effortlessly orchestrate smart and efficient workflows. MVISION XDR delivers end-to-end threat visibility across all attack surfaces, greater context and situational awareness using automation to streamline operations so organizations can preempt an attack rather than scramble to contain a breach.”

MVISION XDR capabilities include advanced threat protection that correlates attack telemetry from multiple data sources to reveal a full picture of an adversary’s work and automated threat management tasks to simplify analyst workflows across complex threat campaigns with MITRE ATT&CK mapping to accelerate investigation and move more rapidly to resolution.

The service also provides proactive threat hunting and optimized response through the integration of MVISION Insights with MVISION Cloud Security Advisor, delivering actionable intelligence to security teams through correlated security posture scoring across all vectors.

The enhanced version of McAfee MVISION XDR is available starting today. Attendees of the online RSA Conference 2021 this week can also obtain further information from the McAfee virtual booth.

Image: McAfee