Key takeaway
Intel TDT processor telemetry adds visibility to Xcitium ZeroDwell containment decisions and complements the platform’s layered defense.
Integrating Intel Threat Detection Technology
On April 26, 2023, at RSA San Francisco, Xcitium announced integration of Intel Threat Detection Technology into its platform. On Intel vPro devices, TDT uses processor-level telemetry for continuous attack monitoring, helping endpoint-security and EDR products detect attacks that evade other methods in a native app, browser or virtual machine.
CPU telemetry alongside ZeroDwell
Xcitium CEO Ken Levine said ZeroDwell isolates unknown objects without a known signature or hash before they can reach real assets. Intel TDT’s CPU telemetry adds visibility to those containment decisions. The layered design pairs immediate virtualization of unknown files with detection-based security tools.
Partner perspectives on the technology
Sarah Pavlak, Industry Principal at Frost & Sullivan, highlighted ZeroDwell’s ability to let users continue using an unknown file or application while preventing it from reaching critical system resources. Carla Rodríguez, Intel VP and GM for Ecosystem Partner Enabling, said the TDT integration combined hardware and software capabilities to strengthen ransomware defense for businesses of different sizes.
The threat context in 2023
The 2023 announcement cited industry analysts’ estimate that ransomware attacks had increased 97% over the preceding two years and caused more than US$20 billion in damage. Xcitium’s case was that combining CPU telemetry, ZeroDwell containment and detection-based tools could strengthen protection against undetected threats.