Kaspersky Endpoint Agent is installed on individual devices in the organization’s IT infrastructure that are running under Microsoft Windows operating system. The application constantly monitors the processes running on these devices, open network connections and the files being modified.
Kaspersky Endpoint Agent provides the protected device's interaction with other Kaspersky solutions to detect comprehensive threats (such as targeted attacks).
Kaspersky Endpoint Agent 3.8, which is part of Kaspersky Endpoint Detection and Response Expert solution, supports interaction with Kaspersky Anti Targeted Attack Platform (KATA) and Kaspersky Sandbox.
The application interacts with Kaspersky Anti Targeted Attack Platform using the KATA Central Node component. When integration of Kaspersky Endpoint Agent with KATA Central Node is configured, the application executes the tasks and applies the settings received from the KATA Central Node component, and sends telemetry data from the protected device to the server with the KATA Central Node component.
When integration of Kaspersky Endpoint Agent with Kaspersky Sandbox is configured, the application provides communication between EPP and Kaspersky Sandbox, as well as actions to automatically respond to detected threats (for example, starts critical areas scan on the device or quarantines suspicious objects).