Intel® Threat Detection Technology: Better Protect Your PC Fleet from Advanced Cyberattacks
Intel® Threat Detection Technology (Intel® TDT) enabled on endpoint device hardware provides AI-assisted monitoring and GPU and NPU acceleration1 to discover advanced attacks that bypass traditional detection methods.
Strengthen Your Endpoint Security Solutions
Helping businesses protect themselves against cyberattacks continues to be an increasingly difficult challenge. Today’s hackers have evolved their attack methods to reach beyond the software level to infect end-user device hardware and firmware. Traditional software-based security solutions are not designed to detect attacks at the hardware level, leaving endpoint devices vulnerable to advanced attacks like ransomware, cryptojacking, and software supply chain attacks.
Intel® TDT extends device-based security capabilities deep within the hardware to help protect endpoint devices from the silicon up. All PCs built on the Intel vPro® platform2 come equipped with Intel® TDT to help augment endpoint security solutions and help IT teams defend their fleet across every layer of the computing stack.
Unleash AI to Detect Advanced Targeted Attacks
Intel® TDT uses CPU telemetry and machine learning (ML) algorithms to profile and detect malware, such as ransomware and cryptojacking, improving monitoring and security performance at the hardware level. In a recent study, Intel® TDT detected 93 percent of presented ransomware threats without software assistance—20 percent more than a competitive system using software alone.3
Improve ISV Performance with Out-of-the-Box Support
Intel® TDT seamlessly integrates with independent software vendor (ISV) solutions to improve detection efficacy and enable novel security use cases—all without requiring installation or deployment-related configuration. To shorten detection time, Intel® TDT offloads demanding security workloads onto Intel® integrated GPUs and NPUs for faster processing and improved user productivity.1
Enhance Detection of Fileless Malware
By offloading advanced memory scanning (AMS) workloads from the CPU to the Intel® integrated GPU, Intel® TDT enables software-based security solutions to scan more frequently. This helps software solutions uncover hard-to-detect fileless attacks hidden in the memory layer with minimal impact on the user experience.
Help Discover Zero-Day Attacks
CPU behavior monitoring supports real-time discovery of zero-day attacks, new variants, and suspicious intermittent encryption so you can catch anomalous behavior earlier and help prevent software supply chain attacks and other sophisticated attacks.
Intel vPro® is the only business platform with built-in hardware security capable of detecting ransomware and software supply chain attacks.4
Take Advantage of Industry-Leading Threat Detection Using Intel® TDT
We work with leading security software vendors to preintegrate Intel® TDT so IT can quickly take advantage of Intel vPro® hardware-based security capabilities. Explore how Intel® TDT helps endpoint security solutions deliver improved security performance and better user experiences.
CrowdStrike Falcon Insight
CrowdStrike Falcon Insight integrates Intel® TDT to boost memory scanning by up to 7x,5 delivering faster detection of fileless attacks. CrowdStrike’s hardware-enhanced exploit detection (HEED) capabilities take advantage of Intel® TDT CPU telemetry to discover suspicious control flows. Capabilities can be enhanced when combined with Dell Trusted Device software on Intel vPro®-based PCs.
Microsoft Defender for Endpoint
Intel® TDT is enabled as part of built-in antivirus software in Windows to help detect advanced attacks such as cryptojacking, ransomware, and fileless attacks.
Watch a demo of the Microsoft Defender for Endpoint solution with Intel
ESET Endpoint Security
ESET leverages Intel® TDT to deliver a multilayered solution to protect small and midsized businesses (SMBs) against advanced attacks like ransomware.
Learn about the ESET solution with Intel
Learn how Intel and ESET SMB solutions help keep you safe against cyberattacks (eBook)
Bufferzone NoCloud™ AI Anti-Phishing Solution
The Bufferzone NoCloud AI anti-phishing solution is optimized on Intel® Core™ Ultra processors, using the NPU to improve efficiency.
Bring Intel® TDT Capabilities to Your Endpoint Security Solution
We can help you enable Intel® TDT capabilities for your endpoint solution. We offer software development kits (SDK), free software, enablement guidance, and go-to-market resources to make integration easy.
Intel vPro® Helps Make It Easy to Deploy a Comprehensive Security Approach
Intel® TDT is just one security component of the Intel vPro® platform. Explore how Intel vPro® can help easily support threat detection best practices across your PC fleet.
Intel® Hardware Shield
Find out how our platform helps defend each layer of your devices, including hardware, BIOS/firmware, hypervisor, VMs, OS, and applications.
Advanced Threat Protections
In addition to Intel® TDT, learn about other hardware-level security features built into every Intel vPro-based PC to protect them from the silicon layer up.
Enhanced Enpoint Security ROI
Find out how modern, security-enhanced PC processors help keep your organization secure while lowering costs.
Browse More Resources
Product and Performance Information
Available on devices with Intel® Core™ Ultra processors.
All versions of the Intel vPro® platform require an eligible Intel® processor, a supported operating system, Intel® LAN and/or WLAN silicon, firmware enhancements, and other hardware and software necessary to deliver the manageability use cases, security features, system performance, and stability that define the platform. See intel.com/performance-vpro for details.
“SE Labs Intelligence-Led Testing: Enterprise Advanced Security (Ransomware),” SE Labs, February 2023.
As of March 2023, Intel has the first and only hardware-based threat detection of its kind that works to augment security software for high-efficacy detection of the latest ransomware, cryptojacking, supply chain style attacks and even zero-day attacks in Windows-based systems. Based on SE Labs – Enterprise Advanced Security (Ransomware) – Intel Threat Detection Technology study published March 2023 (commissioned by Intel), which compared ransomware detection capabilities of an Intel vPro system powered by Intel Core processor against systems powered by AMD Ryzen Pro processors on Windows OS. SE Labs tested Intel’s hardware approach to ransomware detection, using a wide range of ransomware attacks similar to those used against victims in recent months. Systems tested included Intel® Core™ i7-1185G7, AMD Ryzen Pro 5675U, AMD Ryzen Pro 5875U, AMD Ryzen Pro 6650U, and AMD Ryzen Pro 6850U. Visit www.intel.com/tdt to learn more. No product or component can be absolutely secure. Other names and brands may be claimed as the property of others.
“The Crucial Role of Silicon in Advanced Threat Detection,” ABI Research, 2023.