Intel® Threat Detection Technology: Protect Your PC Fleet from Advanced Cyberattacks
Intel® Threat Detection Technology (Intel® TDT) augments endpoint security software with AI that leverages Intel CPU telemetry to uncover cyberattacks that evade traditional detection methods. The solution ensures a performant user experience by offloading AI and memory scanning from the CPU to the integrated GPU and NPU.
Strengthen Your Endpoint Security Solutions
Cyberattacks continue to evolve novel techniques to hide from security software deployed on endpoint PC fleets. Traditional software-only approaches are failing to stop attacks. Ransomware attacks are up to a record $ 1 billion in payouts in 20231, 75% of attacks use stealthy file-less attack methods, and the breakout time to move across a PC fleet is down to only 62 minutes.2
Intel Threat Detection Technology has delivered an innovative approach that is able to fingerprint malware as it attempts to execute on the CPU microarchitecture. This method is immune to traditional malware cloaking or obfuscation techniques and adds a new lens that helps increase the efficacy and performance of security software.
By pairing the right Intel PC hardware with Intel® TDT-optimized security software IT and Sec Ops can better protect PC fleets from ransomware, cryptojacking, file-less attacks to memory, and software supply chain attacks that attempt to infect valid software applications.
Help Detect Advanced Threats with Powerful AI Tuned for Your PC
Intel® TDT uses CPU telemetry and Machine Learning (ML) algorithms to profile and detect malware, such as ransomware and cryptojacking, improving monitoring and security performance at the hardware level. In a recent study, Intel® TDT detected 93 percent of top ransomware variants from the silicon sensor, bolstering the EDR’s overall detection efficacy by 24% over software alone.3
Accelerate Security Software Out of the Box
Intel® TDT has been pre-integrated by leading security ISVs to accelerate security workloads on Intel® Core™-based PCs. Intel's CPU, GPU, and NPU deliver AI accelerators to ensure a performant user experience while increasing endpoint threat protection capabilities.4
Enhance Detection of Fileless Malware
By offloading advanced memory scanning (AMS) workloads from the CPU to the Intel® integrated GPU, Intel® TDT enables software-based security solutions to scan, deeper, and more frequently. This helps software solutions uncover file-less attacks sooner before they can execute attack payloads while ensuring minimal impact on the user experience.
Help Discover Zero-Day Attacks
CPU behavior monitoring supports real-time discovery of zero-day attacks and new variants without stopping to develop signature-based detection methods.
Intel vPro®5 is the only business platform with built-in hardware security capable of detecting ransomware and software supply chain attacks.6
Take Advantage of Industry-Leading Threat Detection Using Intel® TDT
We work with leading security software vendors to pre-integrate Intel® TDT so IT teams can quickly activate hardware-based security capabilities on Intel vPro®-based devices. Explore how Intel® TDT helps endpoint security solutions deliver improved security performance and better user experiences.
CrowdStrike Falcon
CrowdStrike Falcon Insight integrates Intel® TDT to boost memory scanning by up to 7x, delivering faster detection of fileless attacks.7 CrowdStrike’s hardware-enhanced exploit detection (HEED) capabilities take advantage of Intel® TDT CPU telemetry to discover suspicious control flows. Capabilities can be enhanced for below-the-OS security when combined with Dell Trusted Device software on Intel vPro®-based PCs.
Microsoft Defender for Endpoint
Microsoft Defender for Endpoint utilizes Intel Threat Detection Technology for accelerated memory scanning, Cryptojacking detection, and for its CPU assisted Ransomware detection. These capabilities are agentless and integrated directly into Windows for use across the Defender suite of security solutions. These deliver accelerated security processing and better threat detection on Intel vPro Platforms.
Watch a demo of the Microsoft Defender for Endpoint solution with Intel
ESET Endpoint Security
ESET leverages Intel® TDT to deliver a multilayered solution to protect small and midsized businesses (SMBs) against advanced attacks like ransomware.
Learn about the ESET solution with Intel
Learn how Intel and ESET SMB solutions help keep you safe against cyberattacks (eBook)
Bufferzone NoCloud™ AI Anti-Phishing Solution
The Bufferzone NoCloud Anti-Phishing solution is optimized on Intel® Core™ Ultra processors, using the NPU to improve efficiency.
Bring Intel® TDT Capabilities to Your Endpoint Security Solution
We can help you enable Intel® TDT capabilities for your endpoint solution. We offer software development kits (SDK), free software, enablement guidance, and go-to-market resources to make integration easy.
Intel vPro® Helps Make It Easy to Deploy a Comprehensive Security Approach
Intel® TDT is just one security component included with the Intel vPro® suite of technologies. Explore how the Intel vPro® platform can help easily support threat detection best practices across your PC fleet.
Intel® Hardware Shield
Find out how our platform helps defend each layer of your devices, including hardware, BIOS/firmware, hypervisor, VMs, OS, and applications.
Advanced Threat Protections
In addition to Intel® TDT, learn about other hardware-level security features included in the Intel vPro® platform to protect endpoint devices from the silicon layer up.
Enhanced Endpoint Security ROI
Find out how modern, security-enhanced PC processors help keep your organization secure while lowering costs.
Product and Performance Information
“SE Labs Intelligence-Led Testing: Enterprise Advanced Security (Ransomware),” SE Labs, February 2023.
Available on devices with Intel® Core™ Ultra processors.
All versions of the Intel vPro® platform require an eligible Intel® processor, a supported operating system, Intel® LAN and/or WLAN silicon, firmware enhancements, and other hardware and software necessary to deliver the manageability use cases, security features, system performance, and stability that define the platform. See intel.com/performance-vpro for details.
As of March 2023, Intel has the first and only hardware-based threat detection of its kind that works to augment security software for high-efficacy detection of the latest ransomware, cryptojacking, supply chain style attacks and even zero-day attacks in Windows-based systems. Based on SE Labs – Enterprise Advanced Security (Ransomware) – Intel Threat Detection Technology study published March 2023 (commissioned by Intel), which compared ransomware detection capabilities of an Intel vPro system powered by Intel Core processor against systems powered by AMD Ryzen Pro processors on Windows OS. SE Labs tested Intel’s hardware approach to ransomware detection, using a wide range of ransomware attacks similar to those used against victims in recent months. Systems tested included Intel® Core™ i7-1185G7, AMD Ryzen Pro 5675U, AMD Ryzen Pro 5875U, AMD Ryzen Pro 6650U, and AMD Ryzen Pro 6850U. Visit www.intel.com/tdt to learn more. No product or component can be absolutely secure. Other names and brands may be claimed as the property of others.