Artemis

Endgame's AI-powered chatbot, Artemis®, puts powerful analytics in plain English, elevating tier 1 analysts and accelerating tier 3s.

Analysts use Artemis to prioritize, triage, and remediate alerts without relying on complex queries and known IOCs. With Artemis, you can gather and analyze data in minutes across hundreds of thousands of endpoints that would have otherwise taken hours or days with traditional EDR tools.


Resolver

Endgame Resolver, our intuitive attack visualization, renders the origin, extent, and timeline with real-time analysis of file, registry, user, process, network, and DNS data. This visualization empowers analysts to determine root cause and take immediate action without leaving the page.


Event Query Language (EQL)

Endgame's event query language - the first of its kind - provides advanced investigators and analysts with an intuitive scripting interface to swiftly hunt for and identify suspicious activity across Endgame's uniquely enriched event data, using the Artemis chat interface.

Tough question, easy query:
Did net.exe run from a PowerShell instance that made network activity and wasn’t a descendant of NoisyService.exe?

event query language, EQL