Solution
ESET LiveGuard Advanced, ESET Threat Intelligence, and ESET LiveGrid® are services focused on the analysis of suspicious samples. There are significant differences between the workflow and technology used in these services:
| Component | ESET LiveGuard Advanced | ESET Threat Intelligence | ESET LiveGrid® |
|---|---|---|---|
| Submission of files | Files can be submitted from:
|
Only manual submission of files via the ESET Threat Intelligence web portal. | Automatically and manually. |
| Results of analysis | The result of the analysis is available in the ESET PROTECT or ESET PROTECT On-Prem Web Console as a complete behavioral report. | The result of the analysis is available to download in the ESET Threat Intelligence Web Console as a .pdf or .xml document. | No visible results. |
| Result types | Clean, Suspicious, Highly Suspicious, Malicious. | Detected, not detected. | None |
| Information provided to the Administrator | Results and high-level description of the file's behavior. | Very deep and technical information about the file's activity. | None |
| Technology used for analysis | LiveGuard Advanced uses multi-stage analysis, combining advanced detection techniques with behavioral analysis and Machine learning. | ESET Threat Intelligence uses the ESET LiveGrid® Reputation System and 100 million sensors worldwide to predict and prevent attacks. | ESET LiveGrid® uses fuzzy hashing of behavior described in DNA Detections and various Machine learning models. |
| Priority for sample analysis | High | High | Low |
| API connection | ESET PROTECT On-Prem API can manage ESET LiveGuard Advanced actions. | There is an API available for ESET Threat Intelligence. | None |
| User interface | ESET PROTECT or ESET PROTECT On-Prem Web Console | ESET Threat Intelligence web portal | None |
| Supported ESET applications | See the list of supported security applications. The ESET PROTECT or ESET PROTECT On-Prem Web Console is necessary to access the results of the analysis. | ESET Threat Intelligence can be used independently of any ESET applications. | All ESET security applications. |
| Automatic protection for the whole company | Yes | No | No |
