Deep Instinct

Run through the topics of this chapter:

About Deep Instinct

The Deep Instinct Prevention Platform stops known, unknown, and zero-day threats with the highest accuracy and lowest false-positive rate in the ransomware protection industry.

For MSPs, this means reduced risks, greater SOC efficiency, and the knowledge that cybercriminals have lost their advantage. With >99% known, unknown, and zero-day threat accuracy, a guaranteed <0.1% false-positive rate along with a $3M ransomware warranty backed by Munich Re.

The Deep Instinct platform prevents threats prior to execution unlike detection and response solutions that detect malware by behaviors after cybercriminals already installed droppers and artifacts onto networks under attack. Deep Instinct reduces the risk of a breach by meeting cybercriminals earlier and stopping threats 750 times faster than the fastest known ransomware can begin to encrypt media.

Limitations

The following limitations apply: The RMM Service (RMM Agent) does not detect the installed Deep Instinct instance as the anti-virus software and reports that the computer is not protected. The root cause is the installed Deep Instinct instance by default works in detect-only mode, not like the antivirus software. To resolve this, configure Deep Instinct policy on Deep Instinct console and on D-Client tab enable the Integrate D-client with Windows Security Center option. Consider, this option disables Windows Defender, then this option should only be enabled when the Deep Instince policy is fully configured.

Quarantined files can only be managed in Deep Instinct management console.

Deep Instinct platform has own management console with different tools and statistics. To request access to Deep Instinct console, create a Deep Instinct account for the computer as described below

Install Deep Instinct Agents

Deep Instinct requires licensing. One Deep Instinct license is required for every computer where you are planning to use Deep Instinct. 15-day trial is available once for every computer. To install the Deep Instinct agent instance on a computer, proceed as follows:

  • New user experience (new main menu)
  1. Open the Management Console.
  2. In the Computers or RMM menu select required computer. The computer must be online.
  3. In the Deep Instinct column click Install

The installation is performed in silent mode, no interaction is required. Once the installation is complete the Deep Instinct agent information appears in the Deep Instinct column.

Classic user experience (legacy menu)

  1. Open the Management Console.
  2. In the Computers menu, select Remote Management.
  3. Find the required computer, then click the gear icon. The computer must be online.
  4. Select Install Deep Instinct.
  5. Accept terms and conditions, then and click Continue to start silent installation.

The installation is performed in silent mode, no interaction is required.

Deep Instinct Agent Group Installation

To install the Deep Instinct agent instance on multiple computers, proceed as follows: New user experience (new main menu)

  1. Open the Management Console.
  2. In the Computersor RMM pages click Group Actions..
  3. Select Install Deep Instinct on Computers.

Classic user experience (legacy menu)

  1. Open the Management Console.
  2. In the Computers menu, select Remote Management.
  3. Click the Group Actions icon.
  4. Select Install Deep Instinct on Computers.

The installation is performed in silent mode, with no interaction required.

Create Deep Instinct Account

Deep Instinct account to use the Deep Instinct management console can be created for logged in provider or for an administrative account who has logged in and has a Deep Instinct permission.

  1. Open the Management Console.
  2. In the Computers or RMM menu select required computer where you want to add an Deep Instinct account. The computer must be online and Deep Instinct Agent should be installed. Deep Instinct account will be created for the logged in provider or administrative account.
  3. In the Deep Instinct column click Deep Instinct icon

  1. Click Create Account

  1. Copy and save the created Deep Instinct account credentials, then select I have saved my credentials and have access to the specified email address check box. You will navigate to Deep Instinct management console using Go to Deep Instinct button and complete your account setting (SMTP Settings). Your Deep Instinct credentials were sent to email address of logged in account.

You cannot change the provided password. You should use it as Uninstall Password to uninstall D-Clients locally. In case you need to change the passwords, please contact our sales team.

Configure Deep Instinct Policy

By default, installed Deep Instinct instance works in "detect-only" mode. To prevent ransomware attacs, you should configure the Deep Instinct Policy on Deep Instinct management console. You can navigate to Deep Instinct management console using Go to Deep Instinct button and sign in with created Deep Instinct account. Consider to configure notifications in Management Console. Our onboarding team can help you with Deep Instinct policy configuring. You also can [request a demo]9https://info.deepinstinct.com/request-a-demo) on Deep Instinct website.

Configure Deep Instinct Notifications

You can configure global options for notifications sent by Deep Instinct agents. To do this, proceed as follows:

  1. Open the Management Console.
  2. In the Settings menu, select Notifications.
  3. In the Deep Instinct Notifications group, specify the recipients and the alert types.

  1. Once you are done, click Save Changes.

To configure custom notifications sent by Deep Instinct agents for specific company, proceed as follows:

  1. Open the Management Console.
  2. In the Organization menu, select Companies.
  3. Select a company and click Edit
  4. On the Deep Instinct Notification tab select Use Custom Options, and then configure the notification.

  1. Once you are done, click Save.
https://git.cloudberrylab.com/egor.m/doc-help-mbs.git