Response
Response you can undo
When a detection is high confidence, Jetstone acts on the device or the account and tells you what it did. You choose what runs on its own. Every action is logged, and every action can be undone from the notification itself.
Watch
Jetstone detects and notifies. Nothing runs without you.
Guard, the default
Stops the process tree and quarantines the file on high-confidence detections. Isolates the device on high-confidence ransomware or credential theft. Revokes sessions on a confirmed account compromise. Everything else arrives as a card to approve or dismiss with one tap.
What Jetstone can do
- Stop a process and everything it started.
- Quarantine a file, kept so it can be restored.
- Isolate a device from the network while keeping its own connection open, so you can release it.
- Disable a scheduled task or service the attack created.
- Sign the device user out.
- Revoke Microsoft 365 sessions, disable an account, remove an inbox rule or revoke an application grant.
- Never more than half
- Jetstone never isolates a device on its own when that would take out more than half of the enrolled fleet.
- Never your own device unasked
- The device the workspace was set up from is never isolated without a confirmation on a second channel.
- A cap per hour
- In a fleet of 10 or more, isolating more than 20 percent of devices in one hour needs your approval.
Put Jetstone on your devices
Talk to Black Shard about Jetstone for your business.