ATP rules 154 and 155: what is "Defense as Service (DAAS)" ?

[mr54]

Hi, 

I was reading ATP release note from 03/03/23 (content 1779) from Security Updates (trellix.com), and there are two new rules: "Rule 154: Identify files that DAAS reports as suspicious" and "Rule 155: Identify files that DAAS does not report as suspicious", but I can't find anything about "DAAS". Does anyone know?

[Daveb3d · Accepted solution]

Legacy FireEye sandbox

trellix-detection-as-a-service-datasheet.pdf

[mr54]

I saw that documentation, but does it refer to both mentions "Detection" and "Defense"?

[Daveb3d]

I would assume it is the same thing and somebody typed it wrong. Not certain though.

[mr54]

Ok, thanks! 🙂