[研究]SEP, SEP+EDR, DSA, DS+EDR 比較 EDR 能力
2026-08-26
SEP = Symantec Endpoint Protection、DSA = Trend Micro Deep Security Agent
ChatGPT
| 能力 | SEP 本身 | SEP + Symantec EDR | DSA 本身 | DSA + Trend Vision One EDR/XDR |
|---|---|---|---|---|
| Anti-Malware | 🟢 | 🟢 | 🟢 | 🟢 |
| 即時防護 | 🟢 | 🟢 | 🟢 | 🟢 |
| Behavior Monitoring | 🟢 | 🟢 | 🟢 | 🟢 |
| Exploit 防護 | 🟢 | 🟢 | 🟢 | 🟢 |
| Process 偵測 | 🟢 | 🟢 | 🟢 | 🟢 |
| 可疑行為偵測 | 🟢 | 🟢 | 🟢 | 🟢 |
| Endpoint Telemetry 端點遙測 | 🟡 | 🟢 | 🟡 | 🟢 |
| Threat Hunting 威脅狩獵 | ❌/🟡 | 🟢 | ❌/🟡 | 🟢 |
| 事件關聯分析 | ❌/🟡 | 🟢 | 🟡 | 🟢 |
| 攻擊事件 Investigation 調查 | 🟡 | 🟢 | 🟡 | 🟢 |
| IOC 搜尋 (Indicator of Compromise（入侵指標）搜尋) | ❌/🟡 | 🟢 | 🟡 | 🟢 |
| Incident Response | 🟡 | 🟢 | 🟡 | 🟢 |
| EDR Console | ❌ | 🟢 | ❌ | 🟢 |
| 完整 EDR | ❌ | 🟢 | ❌/🟡 | 🟢 |
| FIM / Integrity Monitoring | 🟡 | 🟡 | 🟢 強 | 🟢 強 |
| 指定目錄監控 | 🟡 | 🟡 | 🟢 | 🟢 |
| 檔案新增偵測 | 🟡 | 🟡 | 🟢 | 🟢 |
| 檔案修改偵測 | 🟡 | 🟡 | 🟢 | 🟢 |
| 檔案刪除偵測 | 🟡 | 🟡 | 🟢 | 🟢 |
| Registry 監控 | 🟢 | 🟢 | 🟢 | 🟢 |
| Server 防護 | 🟢 | 🟢 | 🟢 強 | 🟢 強 |
| IPS | 🟢 | 🟢 | 🟢 強 | 🟢 強 |
| Virtual Patching | ❌ | ❌ | 🟢 強項 | 🟢 強項 |
(完)
