This Tolly test brief evaluates Arctic Wolf Aurora Endpoint Security for malware prevention, resource utilization, and endpoint detection and response in Windows 11. Testing with 1,000 recent malware samples found that Aurora identified and quarantined 100% of samples while averaging about 33% CPU usage during scanning. Aurora Focus, the EDR component, also detected every stage of a simulated multi-step attack involving PowerShell, privilege escalation, credential dumping, persistence, log clearing, and exfiltration. With autonomous response enabled, the system stopped the attack at its initial PowerShell stage. Detection and response continued while disconnected from the cloud, demonstrating behavioral protection suitable for resource-constrained and operational technology environments.

Join for free to read