di_blog_post

Deep Instinct prevents more advanced threats than any EPP or EDR in the world.

Deep Instinct Blog: Breaking News and Updates

Explore Deep Instinct DSX

Prevent Zero-Day Attacks

Real-Time Malicious Verdicts

Real-Time Explainability

Lower TCO

Ensure Privacy & Compliance

Deep Instinct DSX

Cloud

Applications

Endpoints

Use Cases

Asset Library

Blog

Videos

Events & Webinars

Resources

About Deep Instinct

Our Customers

Newsroom

Careers

Contact Us

Company

Request Demo

Customer Portal

Integrations and Compliance

Training

Quick Links

Discover how our revolutionary deep learning-powered solution prevents and explains unknown, never-before-seen threats.

explore deep instinct dsx

why dsx

Prevent zero-day attacks

Detect and prevent threats in <20ms, faster than the blink of an eye.

real-time malicious verdicts

Gain actionable, AI-driven intelligence on zero-day threats in seconds.

Real-Time Insights & Explainability

Reduce cybersecurity costs with efficient, high-performance threat prevention.

Enhance data protection while meeting stringent privacy and regulatory requirements.

DEPLOYMENT

Secure your multi-cloud or hybrid infrastructure against zero-day threats.

CLOUD

Safeguard critical data on Network-Attached Storage systems from advanced cyber threats.

Defend SaaS and custom applications from zero-day vulnerabilities and threats.

APPLICATIONS

Protect devices and endpoints with AI-driven threat prevention.

ENDPOINTS

EXPLORE 

Threat Research

Voice Of SecOps

COMPARE

Deep Instinct complements Microsoft Defender with advanced threat prevention to stop threats before they enter your environment.

+ Microsoft Defender

Deep Instinct and Tanium deliver prevention-first endpoint security to reduce risk and boost productivity.

+ Tanium

EDR is not enough — enhance existing cybersecurity tools with advanced, real-time threat prevention using deep learning to produce defense in depth.

EXTEND/ENHANCE LEGACY AV

Replace outdated, legacy AV solutions with prevention-first, deep-learning-based protection purpose-built for cybersecurity.

REPLACE LEGACY AV

Faster and more accurate – Deep Instinct safeguards your data and protects your NAS storage better than Trellix.

REPLACE TRELLIX

Leadership Team

Board of Directors

Partners

Login

content_block

Perspective & Findings

<h4>Don’t Let Application File Uploads Become Malware Downloads</h4>

file-upload-security-blog.jpg

Recent Blog Posts

Listing preview

Perspective & Findings

image_media_card

Recent Blog Posts

listing_preview

BPFDoor Malware Evolves – Stealthy Sniffing Backdoor Ups Its Game

Who is the only NEW vendor in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms?

ChatGPT and Malware: Making Your Malicious Wishes Come True

Top-3 Drawbacks of Content Disarm + Reconstruction (CDR) for Malware Prevention

LSASS Memory Dumps are Stealthier than Ever Before

LSASS memory dumps

Trending at Deep Instinct

carousel_cards

emotet-blog.png

<a href="/glossary/emotet-malware" target="_self">Emotet malware</a> started from humble beginnings as a banking Trojan in 2014. The threat actors behind Emotet have been credited as one of the first criminal groups to provide Malware-as-a-Service (MaaS). They successfully utilized their MaaS to create a massive botnet of infected systems and sold access to third parties, an enterprise that proved so effective it was soon being used by criminal entities such as the <a href="https://heimdalsecurity.com/blog/ryuk-ransomware/" target="_self" isblock="true">Ryuk</a> and Conti ransomware gangs. Emotet also has a history of collaborating with Trickbot, famous for their info-stealing trojan, and Qakbot, another well-known banking trojan.<h2>Emotet Malware: Phishing for victims throughout the pandemic</h2>The Emotet group was prolific throughout the pandemic. They wreaked chaos throughout 2019 and 2020 taking advantage of hot topics as a ruse to convince unsuspecting victims to open malicious phishing emails. Topics included coronavirus information, political news, controversial issues, and supposed state and federal updates around mask mandates.This all changed for Emotet in January 2021 when a joint task force took down the Emotet botnet infrastructure in a global operation involving eight countries led by Europol, the Netherlands, and the U.S.<h2>Is Emotet malware back from the dead? New Emotet variants emerge</h2>Ransomware gangs with millions in incentives to stay active are difficult to tamp down for long. As we’ve seen multiple times in the past, ransomware gangs — or at a minimum their source code — never seem to expire completely.Historically, members of gangs that have been shut down or disbanded tend to flock to other criminal organizations. Ransomware gangs are criminals at the core, and as such their sole purpose is to make money. The Emotet group is no different. Initial reports show that Emotet had reemerged in Q4 of 2021 and really started making waves with reports of massive phishing campaigns targeting Japanese businesses in February and March of 2022. We’ve now seen several massive new malicious phishing campaigns in April and May targeting new regions.In an interesting development, the TrickBot gang has been observed helping its longtime partner Emotet deploy to already infected machines in order to download the new Emotet variants. It has been that Emotet detections have spiked upwards of 2700% in Q1 of 2022 compared to Q4 of 2021.<h2>Emotet 2022: New tricks and threats</h2>Looking at the new threats coming from Emotet in 2022 we can see that there has been an almost <a href="https://press.hp.com/us/en/press-releases/2022/emotet-rockets-into-pole-position-as-most-seen-malware-family.html" target="_self" isblock="true">900%</a> increase in the use of Microsoft Excel macros compared to what we observed in Q4 2021. The attacks we have seen hitting Japanese victims are using <a href="https://www.jpcert.or.jp/english/at/2022/at220006.html" target="_self" isblock="true">hijacked email threads</a> and then using those accounts as a launch point to trick victims into enabling macros of attached malicious office documents. One of the more troubling behaviors of this “new and improved” Emotet is its effectiveness in collecting and utilizing stolen credentials, which are then being weaponized to further distribute the Emotet binaries.<h2>Key Findings of Emotet’s Return in 2022</h2>Threat research teams, including Deep Instinct’s leading threat intel team, and HP’s Wolf Security, have identified the following key findings:<ul><li>9% of threats are unknown, never-before-seen threats</li><li>14% of the email malware has bypassed at least one email gateway security scanner before it was captured</li><li>45% of the malware detected were utilizing some type of office attachment</li><li>The most common attachments used to deliver malware were spreadsheets (33%), executables and scripts (29%), archives (22%), and documents (11%)</li><li>Emotet is now utilizing 64bit shell code, as well as more advanced PowerShell and active scripts</li><li>Almost 20% of all malicious samples were exploiting a 2017 Microsoft vulnerability (<a href="https://www.darkreading.com/operations/microsoft-office-bug-remains-top-malware-delivery-vector" target="_self" isblock="true">CVE-2017-11882</a>)</li></ul><h2>Deep Instinct’s Solution for Combatting Emotet Malware</h2>While <a href="/blog/the-re-emergence-of-emotet" target="_self" isblock="true">Emotet has reemerged</a> and is gaining strength, it still utilizes many of the same attack vectors it has exploited in the past. The issue is that these attacks are getting more sophisticated and are bypassing today’s standard security tools for detecting and filtering out these types of attacks.But here’s the news you’ve been waiting for: here at Deep Instinct, we have a long history of predicting and preventing these types of attacks. While some of the latest attack vectors are new and never-before-seen threats, Deep Instinct has a proven track record of preventing even the newest attacks from Emotet as well as other sophisticated threat groups with technology that was developed and deployed months (and in some cases even years) before the threats were developed and deployed into the wild.Deep Instinct takes a prevention-first approach to <a href="/ransomware-protection-solution" target="_self" isblock="true">stopping ransomware</a> and other malware using the world’s first purpose-built, <a href="https://www.deepinstinct.com/why-deep-instinct" target="_self" isblock="true">deep learning cybersecurity framework</a>. We predict and prevent known, unknown, and zero-day threats in &lt;20 milliseconds, 750X faster than the fastest ransomware can encrypt.For more information, <a href="/contact-us" target="_self" isblock="true">Contact Us</a> or <a href="/request-a-demo" target="_self" isblock="true">Request a Demo</a>.

Back From the Dead, Emotet Returns in 2022

Unpatched-Vulnerabilities-Blog.jpg

<h4>Ransomware’s Guilty Pleasure: Unpatched Vulnerabilities&nbsp;</h4>Cybersecurity pros have had a tough few&nbsp;years with the accelerated onslaught of ransomware attacks. Damages were predicted at more than&nbsp;$6 trillion in 2021&nbsp;and these attacks&nbsp;show no sign of slowing – in fact, we’re seeing a rise in attacks&nbsp;as they&nbsp;evolve to&nbsp;become more sophisticated and&nbsp;destructive. &nbsp;&nbsp;A major trend that has surfaced is a tactical one: we are&nbsp;now seeing cybercriminals actively exploiting vulnerabilities in common software that organizations use every day. &nbsp;<h4>What are unpatched vulnerabilities?&nbsp;</h4>Unpatched vulnerabilities are a favored entrance route for bad actors to breach networks. They occur when security teams fail to patch a vulnerability in a widely used software and it becomes an attack vector for ransomware. In 2021, there was a <a href="https://www.businesswire.com/news/home/20220126005014/en/Ransomware-2021-Year-End-Report-Reveals-Hackers-are-Increasingly-Targeting-Zero-Day-Vulnerabilities-and-Supply-Chain-Networks-for-Maximum-Impact" target="_blank">reported</a> 29% rise in the exploitation of CVEs associated with ransomware. Ransomware gangs are leveraging <a href="https://www.deepinstinct.com/zero-day-attacks">zero-day vulnerabilities</a> and taking advantage of older and known vulnerabilities that organizations have been slow to identify and patch. Shockingly, fifty-six percent&nbsp;of vulnerabilities identified prior to 2021 continue to be actively exploited by bad actors. &nbsp;Security and software vendors are continuously scanning, identifying, and providing critical education and patches around new vulnerabilities – but&nbsp;software is always going to be inherently risky. It is a key reason why known vulnerabilities and unpatched software must be addressed continuously by cybersecurity teams. &nbsp;Below are&nbsp;three common vulnerabilities that ransomware groups have leveraged and exploited on a global scale. The case studies&nbsp;detail real-life reports from our customers and our own testing that showcase&nbsp;Deep Instinct’s prowess in preventing these sophisticated and potent zero-day threats – stopping them pre-execution, before they can cause&nbsp;damage.&nbsp;<h5>Accenture&nbsp;</h5>Exploit/Ransomware family: LockBit 2.0&nbsp; Cost/Ransom Paid: $50M demanded&nbsp; Attack Type: Supply Chain and Extortion Ransomware attack&nbsp; Date: July, 2021&nbsp;Details: Accenture is a global IT firm and one of the world's largest tech consultancies,&nbsp;employing 569,000 employees across 50 countries. The Lockbit gang claimed to have stolen over 6 TB of files from the company in July 2021. LockBit heavily relies on mass vulnerability scanning to identify and exploit unpatched flaws or weaknesses.&nbsp;Accenture reportedly did not pay the ransom and claimed that the affected systems had been recovered from backup. Accenture shared that their restores took 3+ weeks&nbsp;due to investigation and systems cleanup. While the ransom was not paid, the attack cost them in brand reputation and customer trust. &nbsp;Takeaway: Deep Instinct would have prevented this ransomware attack from start to finish.&nbsp;&nbsp;&nbsp;Lockbit 2.0 leverages a malicious component called “Stealbit” to facilitate its extrication capabilities.&nbsp; This is not the first time we have seen adoption of other technologies to increase the effectiveness of attack vectors and techniques utilized by cyber criminals.&nbsp;Deep Instinct was able to acquire a sample of Lockbit 2.0 (early August version) and test it against our prevention solution. Our threat team and investigators even broke the package down into several fragments and Deep Instinct prevented every attack vector within the samples. We were also able to collect several mutated and updated samples since then; Deep Instinct prevented all of these zero-day attacks.&nbsp;&nbsp;&nbsp;NOTE: One interesting aspect of this attack is the ransomware’s ability to kill&nbsp;any type of monitoring to prevent the collection of baseline data when securely being detonated – a feature that is impressive in its’ sophistication.&nbsp;&nbsp;&nbsp;<h5>Kaseya&nbsp;</h5>Exploit/Ransomware family: REvil&nbsp; Cost/Ransom Paid: $70M demanded&nbsp; Attack Type: Double Extortion and Data leak Ransomware attack&nbsp; Date: July, 2021&nbsp;Details: Kaseya offers an IT management system primarily used by managed service providers (MSPs) and IT teams to provide remote management, automation, and support to their customers. These systems are extremely valuable to IT management companies but can also have a significant negative impact&nbsp;if compromised. By infecting the parent supply chain system – Kaseya in this case – attackers can then attain access to hundreds if not thousands more.&nbsp;&nbsp;In this highly-visible attack – executed during the U.S. 4th of July holiday weekend – multiple&nbsp;MSPs and as many as 1500 end customers were impacted.&nbsp;It has been reported by internal whistleblowers that the vulnerability used to launch this attack was initially identified more than five years ago, but not patched. We know that Kaseya was in the process of patching this vulnerability and had already started applying the patches to their cloud infrastructure, which may have prompted the attackers to execute a more rapid attack. It was also shown that legitimate Windows applications were used to assist in sideloading the malicious files.&nbsp;Takeaway:&nbsp;Deep Instinct was able to protect over 29,000 systems across 2,000 clients that were defenseless to this zero-day vulnerability. Under the protection of our platform, zero infections were reported across all clients.&nbsp;&nbsp;&nbsp;NOTE: A very important distinction here is that the Deep Instinct version (Deep Learning algorithm) that was in use by our clients at the time of the Kaseya attack had been created more than eight months prior. It prevented these attacks with&nbsp;NO updates for those eight months highlighting the power of deep learning to Identify and prevent this zero-day attack.&nbsp;&nbsp;The scripts used to exploit and infiltrate the systems were prevented, the payload packages (if they had been able to be dropped) would have been stopped, and no part of the attack was successful or would have been successful. &nbsp;&nbsp;More detailed information from Deep instinct’s Threat Research team on the ransomware attack on Kaseya VSA can be found in our blog post: <a href="https://www.deepinstinct.com/blog/deconstructing-the-revil-ransomware-attack-on-kaseya-vsa">Deconstructing the REvil Ransomware Attack on Kaseya VSA</a><h5>VMware&nbsp;&nbsp;</h5>Exploit/Ransomware family: China-based Aquatic Panda/NightSky ransomware&nbsp; Cost/Ransom Paid: Part of Log4J (Log4shell) vulnerability&nbsp; Attack Type: Double Extortion and Data leak/threat Ransomware attack&nbsp; Date: January, 2022&nbsp;Details: VMware’s Horizon product was found to have the Log4Shell <a href="https://www.vmware.com/security/advisories/VMSA-2021-0028.html">vulnerability</a> in its Apache Tomcat service embedded within the product. Once a web-facing server is identified with the vulnerability, the attacker uses LDAP to execute a malicious Java file that injects a web shell into the VM blast secure Gateway service. This allows the threat actors access to affected networks to&nbsp;use this system as a launch point to further infiltrate into the target’s infrastructure for&nbsp;nefarious purposes.&nbsp;While the threat actors originally only targeted VMware’s Horizon product, this vulnerability was later identified to impact 55 of VMware’s products, including vCenter, Carbon Black cloud workload and EDR, vRealize, and others. VMware released a patch on February 14, 2022, although it remains to be seen how long this vulnerability will continue to impact organizations that fail to prioritize and patch.&nbsp;&nbsp;Takeaway:&nbsp;Deep Instinct’s multi-layer protection was able to detect and prevent NightSky ransomware from running. Deep Instinct stops more threats, faster, than any legacy EPP or EDR in the world, including unknown and zero-day threats.  &nbsp;&nbsp;<h4>Take a Prevention-First Approach with Deep Instinct&nbsp;</h4>Deep Instinct’s Threat Research team has acquired access to all IOCs and suspected ransomware payloads and packages that were detailed in the above ransomware attacks. &nbsp;Not only would Deep Instinct have prevented 100% of the attacks if the <a href="https://www.deepinstinct.com/platform">Deep Instinct Protection Platform</a>&nbsp;was in use on the endpoints of the victims’ environments, but in &gt;99% of samples tested Deep Instinct would have prevented these attacks even with a version of Deep Instinct’s “D-brain” that was created long before the attacks (3-8 months) and with zero updates since deployment.&nbsp;To learn more about Deep Instinct’s unique deep learning framework, check out this <a href="https://www.deepinstinct.com/videos?wchannelid=ysjgh8jbc8&wmediaid=vtilpp0rly" target="_self">video</a>.&nbsp;If you’d like to learn more about our malware, ransomware, and zero-day prevention capabilities – including our industry best $3M no-ransomware guarantee – we’d be delighted to <a href="https://www.deepinstinct.com/request-demo/">give you a demo.</a>&nbsp;

Ransomware’s Guilty Pleasure: Unpatched Vulnerabilities

bh-deepinstinct-masks-blog.jpeg

Two of the year’s most significant cybersecurity conferences were held this past week in Las Vegas, making them the first in-person cybersecurity events in nearly two years. For someone who has been an active member of the cyber community for more than 20 years, the opportunity to re-engage with peers face-to-face and connect as a community was sorely missed and long overdue.The energy and content sharing was incredible despite a smaller turnout and we were all reminded of the extreme passion and esprit de corps that is unique to the cyber world. The collaboration and shared knowledge that comes from our live events always re-energizes us as we see what is possible in the ongoing fight against hackers and bad actors. Cybersecurity is not just about securing “your” network, protecting “your” environment, and testing and securing “your” applications. It’s about creating a safer, more resilient community together.Deep Instinct has taken this approach to heart since our founding in 2015 and we were proud to share research on a new, evolving threat vector involving legacy Excel 4.0 macros and their use in threat evasion at Def Con. The research, which was presented by Tal Leibovich, head of threat research at Deep Instinct, was covered by <a href="https://www.techrepublic.com/article/excel-is-still-a-security-headache-after-30-years-because-of-this-one-feature/">TechRepublic</a> as well – a terrific article and testament to the expertise of our entire research team.Excel 4.0 Macro (XL4) is a legacy scripting language supported in Microsoft Office since 1992. Its replacement is the more advanced scripting language, VBA. However, XL4 is still supported for backward compatibility reasons, leaving a security vulnerability in place for years. We’ve seen a significant rise in malware utilizing XL4 capabilities in just the past year and a half. These campaigns have started becoming ever more sophisticated and prevalent.<img asset_uid="bltb3031ec6e8fb995d" src="https://images.contentstack.io/v3/assets/blt1ec077b6b53d6b3e/bltb3031ec6e8fb995d/61b38b10fc1766686e8bccc3/laptop-code.jpeg" width="586" height="auto" max-width="586"/>Deep Instinct threat researchers reported that these XL4-based threats utilize functions such as auto-open, auto-close, default password protection, and even shared findings of advanced obfuscation techniques, such as decoding the macro code in run-time. While some of these techniques are known, the majority of them are newly discovered based on research by Deep Instinct’s threat teams.Our team also showcased how the Deep Instinct Prevention Platform can identify and prevent these new malicious XL4 strains using our Anomaly Detection algorithms. Even if this malware family evolves and modifies its techniques, Deep instinct will adapt and stop these threats, providing continuous prevention capabilities that no other security solution on the market today can match.The threat landscape has grown exponentially over the past several years – and will continue to grow and change in the years to come. As the boundaries of your organization become less defined, with data stored and sent through cloud networks and across your hybrid environment and endpoints now spread around the globe with people working at home, in offices and everywhere in between, security solutions will have to continue to improve to protect across an ever-larger footprint.If you’d like to see how Deep Instinct can protect you from XL4-based threats, please <a href="/request-demo/" target="_self">request a demo</a>.

Black Hat 2021 + Def Con 29 – New Research on Excel 4.0 Macros

ai-brain

Deep Instinct is an innovation-driven cybersecurity company dedicated to bringing to market the world’s most advanced cyber prevention solution. With Deep Instinct 3.0, we’ve further advanced the <a href="/endpoint-protection/" target="_self">Endpoint Protection Platform</a> (EPP) market by adding new capabilities, features, and functions that significantly improve our toolset and add even more value to organizations that share our prevention-first approach to stopping cyber threats.Preventing Adversarial AI Threats (Adversarial Machine Learning Protection)One of the newest and most challenging trends our threat researchers have seen is the advancement of adversarial machine learning (ML) by cybercriminals. These new ML attack vectors attempt to fool common cybersecurity vendor ML models by supplying deceptive input to cause a malfunction in their models model and bypass their protections. Deep Instinct created the world’s first and only purpose-built deep learning cybersecurity framework to detect and prevent a wide range of cyber-attacks, including adversarial ML attacks. The release of Deep Instinct 3.0 takes our prevention capabilities to the next level through enhancements to our D-Brain’s architecture that allow more robustness and resiliency against adversarial AI threats and similar threats.Expanded platform support – macOS and Linux expansionmacOSWe have expanded our already extensive macOS coverage and will now provide protection to include the Big Sur (v11) macOS release. <a href="https://www.gartner.com/en/documents/3990711/market-guide-for-enterprise-desktops-and-notebooks">Gartner</a> Research indicates that 12.46 percent of endpoints in North America are now macOS based and as more organizations supply macs as a hardware option for employees and expand their endpoints to include more partners, we anticipate the demand for macOS EPP protection to grow. As popularity of macs has increased we’ve noticed a concurrent rise in cyber attacks targeting these systems. Our mission is to prevent threats across all endpoints and this update reflects this vigilant approach to comprehensive detection and prevention.Linux OS SupportThe expansion of our threat protection to include Linux systems further represents our commitment to complete cyber threat prevention regardless of environment or OS. We now offer support for RedHat Linux 7.9 and offer D-Client agents on supported Linux systems.Fileless/Shellcode/Memory InjectionAs cybersecurity solutions have evolved their detection and response capabilities we have observed a noticeable shift to fileless or Shellcode injection attacks. Nation-state actors and well-healed cybercriminals have begun using valid programs and built-in OS features to infiltrate and infect systems with malicious software.These new fileless attack vectors tend to leave very little evidence of their passing or execution, making them extremely difficult to detect and deter by most legacy EPP software vendors. <a href="/blog/what-makes-powershell-a-challenge-for-cybersecurity-solutions/" target="_self">Shellcode attacks</a> are often used to bypass and remain hidden from security and EDR solutions. We have bolstered our solution to add additional predictive and prevention capabilities for Shellcode and fileless-based attacks. This new feature is built into our 3.0 release and does not require special rules or configuration – you just need to click a check box to turn it on and become prevention ready.Credential Theft Production (LSAAS Dumping)Another common attack vector that we’re seeing with more frequency is LSASS memory scraping or dumping. Threat actors are now attempting to capture and use the cached access credential stored in the process memory of the Local Security Authority Subsystem Service (LSASS) of Windows systems. After an end user logs on, the system generates and stores a variety of credential materials in LSASS process memory. If undetected and prevented, cybercriminals can harvest these credential materials to conduct lateral movement. Deep Instinct 3.0 now offers protection against these advanced <a href="/blog/lsass-memory-dumps-are-stealthier-than-ever-before/" target="_self">LSAAS attacks</a><a href="https://deepinsarchive.wpengine.com/2021/01/24/lsass-memory-dumps-are-stealthier-than-ever-before/">.</a>Threat Hunting – Suspicious and Malicious Behavior Event ReportingDeep Instinct has now enabled our D-Client agent to identify, report, and record unusual suspicious and malicious activities on the endpoint in real-time, as they occur. As threat actors become stealthier, it becomes increasingly important to identify their presence and behavior as quickly as possible to prevent harm to your network. The information gained by threat hunting is very valuable alone, but combined with other security and log aggregate tools, security teams now have the ability to be far more proactive in their response to network intrusions.MITRE ATT&CK Framework IntegrationMITRE have become widely known and respected for their knowledgebase, education and expertise, and understanding of common attacker models, methodologies, and mitigation.  The <a href="https://attack.mitre.org/">MITRE ATT&CK Framework</a> assists organizations in the detection and prevention of these common threat vectors, techniques, and helps detail how to prevent these threats.  Deep Instinct has worked with MITRE to integrate their ATT&CK framework into our EPP product, allowing our customers’ SOC teams to better prioritize threats as they are detected and prevented in their environment, saving valuable time and energy, and allowing these experts to focus on more challenging threats.If you are an existing customer and would like to know more about these exciting new capabilities, please reach out to your Customer Success contact today.And if you’re interested in Deep Instinct we would be pleased to demo our prevention-first approach to cybersecurity and provide a thorough review of Deep Instinct 3.0 features and benefits. Please <a href="/contact-us/" target="_self">contact us</a> and a sales rep will be in touch with you shortly.

What's New in Deep Instinct 3.0?

Discover how Deep Instinct DSX protects your NAS storage more effectively than Trellix.