Aurora Protect uses cloud services to determine if softwares, files, and websites are possibly malicious and a threat to device security.

Aurora Protect cloud services use AI, machine learning, and mathematical models to:

• Process large volumes of data from global sources

• Retain and continuously learn from data patterns and properties

• Make intelligent predictions and decisions about the possible risks of softwares, files, and internet destinations based on data

The Aurora Protect agent agent provides threat analysis based on file scans. If a file is identified as malicious, the Aurora Protect agent performs any mitigation actions that you configured, such sending an alert or quarantining the file. The agent includes a local Aurora Protect service model, so that the agent can still score files even if it can't communicate with the cloud.

The Aurora Focus agent on desktop devices sends the data that it collects to Aurora Focus cloud services. The data is aggregated and stored in the secure Aurora Focus cloud database. Aurora Focus data analytics services offer rich interpretations of device data that you can access in the Aurora Endpoint Security console.

Aurora Focus uses a Context Analysis Engine (CAE) to analyze and correlate events as they occur on devices. You can configure Aurora Focus to perform automated response actions when the CAE identifies artifacts of interest, such as displaying a notification or signing the user out, to provide an additional layer of threat detection and prevention that complements Aurora Protect capabilities.