Positive Technologies has released PT Network Attack Discovery (PT NAD) version 13.0. The update introduces cloud-based detection integrated with the PT Expert Cloud service, which enhances threat analysis by incorporating anonymized traffic statistics from other clients and data on IP addresses and domains.
The system now supports automated attack containment. Security specialists can isolate compromised nodes or block user accounts directly from the PT NAD console using MaxPatrol EDR or External Dynamic Lists (EDL) supported by various NGFW vendors.
Storage capabilities have been expanded to include S3-compatible and network file storage for archival metadata, reducing costs for long-term data retention. The update also improves non-signature analysis of network protocols using machine learning, specifically enhancing the detection of VPN traffic such as Xray, VLESS, VMess, REALITY, and XTLS.
Additional updates include more flexible integrations with both proprietary and third-party network sandboxes, updated standard dashboards, and a new widget for tracking the most dangerous attacks. The product is currently available for users.
