FortiNDR Service

FortiNDR (Network Detection and Response), formerly called FortAI, aims to assist SecOps to find network anomalies and identify malware at ground breaking sub-second detection. Combined with local machine learning and Cloud machine learning, FortiNDR relies on FortiGuard security services such as Artificial Neural Network Updates, and other NDR related updates to identify attacks. NDR updates includes and not limiting to weak cipher and vulnerable protocols detection, malicious web campaign lookups, encrypted attacks based on JA3 hashes, network intrusions, IP & DNS based botnet attacks, and lastly ML traffic profiling