PUBLICATION

EINSTEIN 2

Revision Date

EINSTEIN 1 (E1) analyzes network flow information from participating Federal Civilian Executive Branch (FCEB) agencies' networks and provides a high-level perspective from which to observe potential malicious activity in computer network traffic of participating agencies' computer networks. EINSTEIN 2 (E2) incorporates network intrusion detection technology capable of alerting the Cybersecurity and Infrastructure Security Agency (CISA) to the presence of malicious or potentially harmful computer network activity in FCEB agency network traffic. E2 principally relies on commercially available intrusion detection capabilities to increase CISA's situational awareness.

Additional information about E2 can be found on CISA's EINSTEIN page.

For questions concerning E2, please contact ncpsprogramoffice@hq.dhs.gov.