Sangfor XDDR (Extended Detection and Dynamic Response) is a security framework that extends traditional XDR capabilities by implementing an integrated security solution that enables direct integration between Sangfor and third-party products. The framework allows correlation of anomalous behavior between endpoints, networks, and cloud environments while coordinating responses between security products using Cyber Command to integrate threat information and orchestrate actions. The system integrates with Sangfor NGAF for endpoint security vulnerability scanning and patch management, while utilizing real-time threat intelligence from cloud-based NeuralX for malware recognition and network-wide threat disposal. XDDR addresses malware infections and APT breaches across organizational networks by implementing coordinated responses to contain and mitigate insider threats when security breaches occur.
