TRIAGINGX Advanced Endpoint Security Solution

Endpoint threat hunting can't be easier

TXHunter provides a better and easier threat hunting tool for post incidence and protactive investigation. No need for 10 plus years experience, anyone can hunt for threats. No need to wait for alerts, anyone can investigate the system proactively for potential threats, vulnerabilities and mis configurations. 

TXHunter is very light and fast, offers agentless and offline hunting flexiability. TXHunter has built in sandbox, vulnerability scanner, AV scanner, auditing, IOC query, IOD investigation, network analysis, and many other capabilities. When it hunts, it searches system data, email inbox, memory, deleted files, running process, wmi hooks, dns cache, browser history, network connections, past running processes, configurations, windows events, firewall rules, etc. It digs out the most hidden threats and weakness in a matter of a couple of minutes.

Patent pending unavoidable ransomware trap

Unavoidable ransomware trap makes ransomware impossilbe to fulfill its business logic without being caught. This patent pending technology is a recent addition to our powerful EDR. It can precisely detect and stop ransomware at run time, and restore user data files after encrypted. It is implemented as a Windows kernel module, runs at the lowest level of the system with the privilidge to take down ransomware attacks during run time. After it stops ransomware program, it cleans up ransomwam remains and restores user data files back to its original content, even the file content is encrypted.

This advanced feature has made TXShield (EDR) successfully detected and stopped the most recent ransomwares, such as Petya, BlackMatter, Matryoshka, and many others. With TXShield, user never need to worry about ransomware attacks.

Advanced EDR solution

TXShield (XDR/EDR), offers better real-time detection and protection against modern threats. Its advanced features, such as a built-in sandbox, AV engine, IOC query, IOD investigation, and more, allow for faster response times.

TXShield's arsenal of security tools includes a blacklist/whitelist, vulnerability scanning, email-borne malware scanning, post-execution program investigation, WMI hook validation, firewall rule change monitoring, AI/DL-based detection, and Yara rule-based detection. It also monitors malicious network activity, provides SOC automation, and has a patented technology for ransomware protection and file restoration.

In addition to its endpoint protection capabilities, TXShield can be used for proactive threat hunting, auditing, security posture measurement, custom security policy enforcement, and IT troubleshooting. With its ability to quickly identify changes, TXShield helps IT help desks efficiently resolve issues.

Detect unknown malware file by its behavior

TXSandbox can easily detect unknown malware program through its behavior. What makes it outstanding is that it can detect unknown malware file even if it is encrypted or packed by the toughest packers, such as Thermida, Armadillo, VMprotect, etc. It is also specially deisgned to defeat malware's sandbox evasion technics, precisely expose its behavior for high detection rate. TXSandbox also has cloud awareness built in, it detects unknown malware program that particularly targets cloud applications. This is why it has been used to analyze and verify cloud based application's security posture.

TXSandbox can be deployed on premise, in private cloud or public cloud. Its restful API set provides easy way for integration. It resides in the same appliance along with FW/IPS or with remote link. TXSandbox can also be easily customized with its execution evironment, makes it ideal choice for large enterprises to detect targetted attacks.