Secureworks

Red Cloak Endpoint Agent is Secureworks' proprietary endpoint detection and response (EDR) agent designed to work natively with the Taegis XDR platform. It collects detailed endpoint telemetry including process execution, network connections, file system changes, registry modifications, and user activity for advanced threat detection. 

The agent provides deep endpoint visibility optimized for Secureworks' threat intelligence and detection analytics within the Taegis platform. It captures security-relevant events at the kernel and user level, enabling detection of malware execution, lateral movement, persistence mechanisms, and living-off-the-land techniques, while maintaining a lightweight footprint on endpoints.