Managed detection and response GLOSSARY

What is Multi-signal MDR coverage?

Enabling multi-signal coverage means that a managed detection and response provider collects data across multiple signal sources within your environment, rather than just relying on just one signal (as is the case with tools such as endpoint detection and response or providers like MSSPs). It’s important to remember that MDR providers can only detect and respond to what they can see. 

When a true Managed Detection and Response provider is engaged, data is collected from multiple signal sources, such as endpoint, log, network, identity and cloud sources, to detect threats before they become business disrupting events.    

eSentire Multi-Signal MDR 

Our multi-signal MDR approach ingests endpoint, network, log, cloud, identity, asset and vulnerability data that enables complete attack surface visibility. Enriched detections from the eSentire Threat Response Unit are applied to captured data identifying known threats and suspicious activity across every layer of the attack surface. 

Automated blocking capabilities built into our Open XDR Platform prevent attackers from gaining an initial foothold while our expert Elite Threat Hunters can initiate manual containment at multiple levels of the attack surface. By using host isolation, malicious network communication disruption, identity-based restriction and other measures, we can stop the attacker at any level. 

Learn more why multi-signal MDR matters to protect your business in the Understanding Why Mult-signal MDR Matters white paper.